You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@metron.apache.org by ni...@apache.org on 2017/01/23 15:12:18 UTC
[1/5] incubator-metron git commit: METRON-659 Emulate Sensors in
Development Environments (nickwallen) closes apache/incubator-metron#417
Repository: incubator-metron
Updated Branches:
refs/heads/master 368e7ad63 -> d1fcda604
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/tasks/main.yml
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/tasks/main.yml b/metron-deployment/roles/sensor-stubs/tasks/main.yml
new file mode 100644
index 0000000..708880f
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/tasks/main.yml
@@ -0,0 +1,40 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+---
+- name: Create home directory
+ file: path={{ item }} state=directory mode=0755
+ with_items:
+ - "{{ sensor_stubs_home }}"
+ - "{{ sensor_stubs_bin }}"
+ - "{{ sensor_stubs_data }}"
+
+- name: Distribute stub data
+ copy: src={{ item }} dest={{ sensor_stubs_data }}/
+ with_items:
+ - bro.out
+ - snort.out
+ - yaf.out
+
+- name: Install service script
+ template: src=sensor-stubs dest=/etc/init.d/sensor-stubs mode=0755
+
+- name: Install sensor stubs
+ template: src={{ item }} dest={{ sensor_stubs_bin }}/ mode=0755
+ with_items:
+ - start-bro-stub
+ - start-snort-stub
+ - start-yaf-stub
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/templates/sensor-stubs
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/templates/sensor-stubs b/metron-deployment/roles/sensor-stubs/templates/sensor-stubs
new file mode 100644
index 0000000..eaab69d
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/templates/sensor-stubs
@@ -0,0 +1,154 @@
+#!/usr/bin/env bash
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# metron sensor-stubs service
+# chkconfig: 345 20 80
+# description: Simulates the behavior of a sensor by sending canned telemetry data to a Kafka topic
+# processname: sensor-stubs
+#
+NAME=sensor-stubs
+DESC="Simulates the behavior of a sensor by sending canned telemetry data to a Kafka topic"
+SCRIPTNAME=/etc/init.d/$NAME
+LOGFILE="{{ sensor_stubs_log }}"
+DAEMON_PATH="{{ sensor_stubs_home }}"
+DATA="{{ sensor_stubs_data }}"
+
+# the delay between each 'batch' of messages in seconds.
+# see {{ sensor_stubs_bin }}/start-sensor-stub for more information.
+DELAY={{ sensor_stubs_delay }}
+
+# the number of messages to send in each batch.
+# see {{ sensor_stubs_bin }}/start-sensor-stub for more information.
+COUNT={{ sensor_stubs_count }}
+
+#
+# which sensors? defaults to bro, snort, yaf
+#
+SENSORS="${@:2}"
+if [ -z "${SENSORS}" ]; then
+ SENSORS=('bro' 'yaf' 'snort')
+fi
+
+#
+# start a sensor stub
+#
+start() {
+
+ # if pidfile exists, do not start another
+ PIDFILE="/var/run/$NAME-$1.pid"
+ if [ -f $PIDFILE ]; then
+ PID=`cat $PIDFILE`
+ printf "%10s: %s \n" "$1" "OK [$PID]"
+ return
+ fi
+
+ # kick-off the daemon
+ DAEMON="{{ sensor_stubs_bin }}/start-$1-stub $DELAY $COUNT"
+ PID=`$DAEMON >> $LOGFILE 2>&1 & echo $!`
+
+ if [ -z $PID ]; then
+ printf "%10s: %s \n" "$1" "Fail"
+ else
+ echo $PID > $PIDFILE
+ printf "%10s: %s \n" "$1" "Ok [$PID]"
+ fi
+}
+
+#
+# stop a sensor stub
+#
+stop() {
+ PIDFILE="/var/run/$NAME-$1.pid"
+ cd $DAEMON_PATH
+ if [ -f $PIDFILE ]; then
+ PID=`cat $PIDFILE`
+ while sleep 1
+ echo -n "."
+ kill -0 $PID >/dev/null 2>&1
+ do
+ kill $PID
+ done
+
+ printf "%10s: %s \n" "$1" "Stopped [$PID]"
+ rm -f $PIDFILE
+ else
+ printf "%10s: %s \n" "$1" "Not running"
+ fi
+}
+
+#
+# status check of sensor stub
+#
+status() {
+ PIDFILE="/var/run/$NAME-$1.pid"
+ if [ -f $PIDFILE ]; then
+ PID=`cat $PIDFILE`
+ if [ -z "`ps axf | grep ${PID} | grep -v grep`" ]; then
+ printf "%10s: %s \n" "$1" "Process dead but pidfile exists"
+ else
+ printf "%10s: %s \n" "$1" "Running [${PID}]"
+ fi
+ else
+ printf "%10s: %s \n" "$1" "Not running"
+ fi
+}
+
+case "$1" in
+
+ ##############################################################################
+ # start
+ #
+ start)
+ printf "%-50s \n" "Starting $NAME..."
+ for sensor in "${SENSORS[@]}"; do
+ start $sensor
+ done
+ ;;
+
+ ##############################################################################
+ # status
+ #
+ status)
+ printf "%-50s \n" "Checking $NAME..."
+ for sensor in "${SENSORS[@]}"; do
+ status $sensor
+ done
+ ;;
+
+ ##############################################################################
+ # stop
+ #
+ stop)
+ printf "%-50s \n" "Stopping $NAME..."
+ for sensor in "${SENSORS[@]}"; do
+ stop $sensor
+ done
+ ;;
+
+ ##############################################################################
+ # restart
+ #
+ restart)
+ $0 stop
+ $0 start
+ ;;
+
+ *)
+ echo "Usage: $0 {status|start|stop|restart}"
+ exit 1
+esac
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/templates/start-bro-stub
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/templates/start-bro-stub b/metron-deployment/roles/sensor-stubs/templates/start-bro-stub
new file mode 100644
index 0000000..fb70d1e
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/templates/start-bro-stub
@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#
+# simulates the behavior of a sensor by sending canned telemetry data
+# to a Kafka topic.
+#
+# a subset of the canned data is randomly selected and is sent in
+# batches. the timestamp of the message is altered to match current
+# system time. the number of messages sent in each batch, along with
+# the time delay between batches can be configured.
+#
+# start-bro-stub <DELAY> <COUNT>
+#
+
+#
+# how long to delay between each 'batch' in seconds.
+#
+DELAY=${1:-{{ sensor_stubs_delay }}}
+
+#
+# how many messages to send in each 'batch'. the messages are drawn randomly
+# from the entire set of canned data.
+#
+COUNT=${2:-{{ sensor_stubs_count }}}
+
+INPUT="{{ sensor_stubs_data }}/bro.out"
+PRODUCER="{{ kafka_home }}/bin/kafka-console-producer.sh"
+TOPIC="bro"
+
+while true; do
+
+ # transform the bro timestamp and push to kafka
+ SEARCH="\"ts\"\:[0-9]\+.[0-9]\{6\}"
+ REPLACE="\"ts\"\:`date +%s`.000000"
+ shuf -n $COUNT $INPUT | sed -e "s/$SEARCH/$REPLACE/g" | $PRODUCER --broker-list {{ kafka_broker_url }} --topic $TOPIC
+
+ sleep $DELAY
+done
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/templates/start-snort-stub
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/templates/start-snort-stub b/metron-deployment/roles/sensor-stubs/templates/start-snort-stub
new file mode 100644
index 0000000..3123782
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/templates/start-snort-stub
@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#
+# simulates the behavior of a sensor by sending canned telemetry data
+# to a Kafka topic.
+#
+# a subset of the canned data is randomly selected and is sent in
+# batches. the timestamp of the message is altered to match current
+# system time. the number of messages sent in each batch, along with
+# the time delay between batches can be configured.
+#
+# start-snort-stub <DELAY> <COUNT>
+#
+
+#
+# how long to delay between each 'batch' in seconds.
+#
+DELAY=${1:-{{ sensor_stubs_delay }}}
+
+#
+# how many messages to send in each 'batch'. the messages are drawn randomly
+# from the entire set of canned data.
+#
+COUNT=${2:-{{ sensor_stubs_count }}}
+
+INPUT="{{ sensor_stubs_data }}/snort.out"
+PRODUCER="{{ kafka_home }}/bin/kafka-console-producer.sh"
+TOPIC="snort"
+
+while true; do
+
+ # transform the timestamp and push to kafka
+ SEARCH="[^,]\+ ,"
+ REPLACE="`date +'%m\/%d\/%y-%H:%M:%S'`.000000 ,"
+ shuf -n $COUNT $INPUT | sed -e "s/$SEARCH/$REPLACE/g" | $PRODUCER --broker-list {{ kafka_broker_url }} --topic $TOPIC
+
+ sleep $DELAY
+done
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/templates/start-yaf-stub
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/templates/start-yaf-stub b/metron-deployment/roles/sensor-stubs/templates/start-yaf-stub
new file mode 100644
index 0000000..1966d39
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/templates/start-yaf-stub
@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#
+# simulates the behavior of a sensor by sending canned telemetry data
+# to a Kafka topic.
+#
+# a subset of the canned data is randomly selected and is sent in
+# batches. the timestamp of the message is altered to match current
+# system time. the number of messages sent in each batch, along with
+# the time delay between batches can be configured.
+#
+# start-yaf-stub <DELAY> <COUNT>
+#
+
+#
+# how long to delay between each 'batch' in seconds.
+#
+DELAY=${1:-{{ sensor_stubs_delay }}}
+
+#
+# how many messages to send in each 'batch'. the messages are drawn randomly
+# from the entire set of canned data.
+#
+COUNT=${2:-{{ sensor_stubs_count }}}
+
+
+INPUT="{{ sensor_stubs_data }}/yaf.out"
+PRODUCER="{{ kafka_home }}/bin/kafka-console-producer.sh"
+TOPIC="yaf"
+
+while true; do
+
+ # transform the timestamp and push to kafka
+ SEARCH="[0-9]\{4\}-[0-9]\{2\}-[0-9]\{2\} [0-9]\{2\}:[0-9]\{2\}:[0-9]\{2\}\.[0-9]\+"
+ REPLACE="`date +'%Y-%m-%d %H:%M:%S'`.000"
+ shuf -n $COUNT $INPUT | sed -e "s/$SEARCH/$REPLACE/g" | $PRODUCER --broker-list {{ kafka_broker_url }} --topic $TOPIC
+
+ sleep $DELAY
+done
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/vagrant/full-dev-platform/Vagrantfile
----------------------------------------------------------------------
diff --git a/metron-deployment/vagrant/full-dev-platform/Vagrantfile b/metron-deployment/vagrant/full-dev-platform/Vagrantfile
index 1c6e3f0..c73a706 100644
--- a/metron-deployment/vagrant/full-dev-platform/Vagrantfile
+++ b/metron-deployment/vagrant/full-dev-platform/Vagrantfile
@@ -17,7 +17,7 @@
require 'getoptlong'
ansibleTags=''
-ansibleSkipTags='solr,yaf'
+ansibleSkipTags='solr,sensors'
begin
opts = GetoptLong.new(
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/vagrant/quick-dev-platform/Vagrantfile
----------------------------------------------------------------------
diff --git a/metron-deployment/vagrant/quick-dev-platform/Vagrantfile b/metron-deployment/vagrant/quick-dev-platform/Vagrantfile
index 3963ff4..28c73da 100644
--- a/metron-deployment/vagrant/quick-dev-platform/Vagrantfile
+++ b/metron-deployment/vagrant/quick-dev-platform/Vagrantfile
@@ -17,7 +17,7 @@
require 'getoptlong'
ansibleTags='ambari-agent,hdp-deploy,metron'
-ansibleSkipTags='solr,yaf'
+ansibleSkipTags='solr,sensors'
begin
opts = GetoptLong.new(
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index 8b3cbee..215333b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -268,6 +268,7 @@
<exclude>**/hbase/data/**</exclude>
<exclude>**/kafkazk/data/**</exclude>
<exclude>**/wait-for-it.sh</exclude>
+ <exclude>**/*.out</exclude>
</excludes>
</configuration>
</plugin>
[5/5] incubator-metron git commit: METRON-659 Emulate Sensors in
Development Environments (nickwallen) closes apache/incubator-metron#417
Posted by ni...@apache.org.
METRON-659 Emulate Sensors in Development Environments (nickwallen) closes apache/incubator-metron#417
Project: http://git-wip-us.apache.org/repos/asf/incubator-metron/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-metron/commit/d1fcda60
Tree: http://git-wip-us.apache.org/repos/asf/incubator-metron/tree/d1fcda60
Diff: http://git-wip-us.apache.org/repos/asf/incubator-metron/diff/d1fcda60
Branch: refs/heads/master
Commit: d1fcda6043fe608167cde616214e4059663fb131
Parents: 368e7ad
Author: nickwallen <ni...@nickallen.org>
Authored: Mon Jan 23 10:11:42 2017 -0500
Committer: Nick Allen <ni...@nickallen.org>
Committed: Mon Jan 23 10:11:42 2017 -0500
----------------------------------------------------------------------
metron-deployment/amazon-ec2/run.sh | 2 +-
metron-deployment/playbooks/metron_install.yml | 12 +
metron-deployment/roles/monit/defaults/main.yml | 4 +-
metron-deployment/roles/monit/tasks/main.yml | 8 +
.../roles/monit/tasks/monit-definitions.yml | 18 +-
.../monit/tasks/monit-sensor-definitions.yml | 38 +
.../monit/tasks/monit-stub-definitions.yml | 30 +
.../roles/monit/templates/monit/bro-stub.monit | 25 +
.../monit/templates/monit/snort-stub.monit | 25 +
.../roles/monit/templates/monit/yaf-stub.monit | 25 +
metron-deployment/roles/sensor-stubs/README.md | 85 +
.../roles/sensor-stubs/defaults/main.yml | 25 +
.../roles/sensor-stubs/files/bro.out | 1346 +
.../roles/sensor-stubs/files/snort.out | 27404 +++++++++++++++++
.../roles/sensor-stubs/files/yaf.out | 22164 +++++++++++++
.../roles/sensor-stubs/tasks/main.yml | 40 +
.../roles/sensor-stubs/templates/sensor-stubs | 154 +
.../roles/sensor-stubs/templates/start-bro-stub | 55 +
.../sensor-stubs/templates/start-snort-stub | 55 +
.../roles/sensor-stubs/templates/start-yaf-stub | 56 +
.../vagrant/full-dev-platform/Vagrantfile | 2 +-
.../vagrant/quick-dev-platform/Vagrantfile | 2 +-
pom.xml | 1 +
23 files changed, 51555 insertions(+), 21 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/amazon-ec2/run.sh
----------------------------------------------------------------------
diff --git a/metron-deployment/amazon-ec2/run.sh b/metron-deployment/amazon-ec2/run.sh
index fac3f68..cad4fb7 100755
--- a/metron-deployment/amazon-ec2/run.sh
+++ b/metron-deployment/amazon-ec2/run.sh
@@ -67,6 +67,6 @@ RC=$?; if [[ $RC != 0 ]]; then exit $RC; fi
cd $DEPLOYDIR
export EC2_INI_PATH=conf/ec2.ini
ansible-playbook -i ec2.py playbook.yml \
- --skip-tags="solr" \
+ --skip-tags="solr, sensor-stubs" \
--extra-vars="env=$ENV" \
$EXTRA_ARGS
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/playbooks/metron_install.yml
----------------------------------------------------------------------
diff --git a/metron-deployment/playbooks/metron_install.yml b/metron-deployment/playbooks/metron_install.yml
index a18fb30..9f2d231 100644
--- a/metron-deployment/playbooks/metron_install.yml
+++ b/metron-deployment/playbooks/metron_install.yml
@@ -137,6 +137,18 @@
- sensors
#
+# sensor stubs - rather than deploying the sensors, deploy ligher weight
+# stubs that mimic the behavior of the real sensors
+#
+- hosts: sensors
+ become: true
+ roles:
+ - { role: ambari_gather_facts }
+ - { role: sensor-stubs }
+ tags:
+ - sensor-stubs
+
+#
# monitor and start metron services with monit
#
- hosts: metron
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/monit/defaults/main.yml
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/monit/defaults/main.yml b/metron-deployment/roles/monit/defaults/main.yml
index b1818bc..608be38 100644
--- a/metron-deployment/roles/monit/defaults/main.yml
+++ b/metron-deployment/roles/monit/defaults/main.yml
@@ -19,8 +19,8 @@ monit_home: /usr/local/monit
monit_config_home: /etc/monit.d
monit_user: admin
monit_pass: monit
-topology_start_timeout: 60
-topology_stop_timeout: 60
+topology_start_timeout: 120
+topology_stop_timeout: 120
bro_pid_file: /usr/local/bro/spool/bro/.pid
elasticsearch_pid_file: /var/run/elasticsearch/elasticsearch.pid
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/monit/tasks/main.yml
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/monit/tasks/main.yml b/metron-deployment/roles/monit/tasks/main.yml
index ecae787..3718797 100644
--- a/metron-deployment/roles/monit/tasks/main.yml
+++ b/metron-deployment/roles/monit/tasks/main.yml
@@ -19,3 +19,11 @@
- include: monit.yml
- include: scripts.yml
- include: monit-definitions.yml
+
+- include: monit-sensor-definitions.yml
+ tags:
+ - sensors
+
+- include: monit-stub-definitions.yml
+ tags:
+ - sensor-stubs
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/monit/tasks/monit-definitions.yml
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/monit/tasks/monit-definitions.yml b/metron-deployment/roles/monit/tasks/monit-definitions.yml
index f9e3897..1d29795 100644
--- a/metron-deployment/roles/monit/tasks/monit-definitions.yml
+++ b/metron-deployment/roles/monit/tasks/monit-definitions.yml
@@ -16,10 +16,6 @@
# limitations under the License.
#
---
-- name: Create monit definition for bro
- template: src=monit/bro.monit dest={{ monit_config_home }}/bro.monit
- when: ("sensors" in group_names) and (install_bro | default(True))
-
- name: Create monit definition for elasticsearch
template: src=monit/elasticsearch.monit dest={{ monit_config_home }}/elasticsearch.monit
when: ("search" in group_names) and (install_elasticsearch | default(True))
@@ -47,19 +43,9 @@
- name: Create monit definition for pcap-replay
template: src=monit/pcap-replay.monit dest={{ monit_config_home }}/pcap-replay.monit
when: ("sensors" in group_names) and (install_pcap_replay | default(False))
-
+ tags: sensors
+
- name: Create monit definition for pcap-service
template: src=monit/pcap-service.monit dest={{ monit_config_home }}/pcap-service.monit
when: ("pcap_server" in group_names)
-- name: Create monit definition for pycapa
- template: src=monit/pycapa.monit dest={{ monit_config_home }}/pycapa.monit
- when: ("sensors" in group_names) and (install_pycapa | default(True))
-
-- name: Create monit definition for snort
- template: src=monit/snort.monit dest={{ monit_config_home }}/snort.monit
- when: ("sensors" in group_names) and (install_snort | default(True))
-
-- name: Create monit definition for yaf
- template: src=monit/yaf.monit dest={{ monit_config_home }}/yaf.monit
- when: ("sensors" in group_names) and (install_yaf | default(True))
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/monit/tasks/monit-sensor-definitions.yml
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/monit/tasks/monit-sensor-definitions.yml b/metron-deployment/roles/monit/tasks/monit-sensor-definitions.yml
new file mode 100644
index 0000000..4b2d5de
--- /dev/null
+++ b/metron-deployment/roles/monit/tasks/monit-sensor-definitions.yml
@@ -0,0 +1,38 @@
+
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+---
+- name: Create monit definition for pcap-replay
+ template: src=monit/pcap-replay.monit dest={{ monit_config_home }}/pcap-replay.monit
+ when: ("sensors" in group_names) and (install_pcap_replay | default(False))
+
+- name: Create monit definition for pycapa
+ template: src=monit/pycapa.monit dest={{ monit_config_home }}/pycapa.monit
+ when: ("sensors" in group_names) and (install_pycapa | default(True))
+
+- name: Create monit definition for snort
+ template: src=monit/snort.monit dest={{ monit_config_home }}/snort.monit
+ when: ("sensors" in group_names) and (install_snort | default(True))
+
+- name: Create monit definition for yaf
+ template: src=monit/yaf.monit dest={{ monit_config_home }}/yaf.monit
+ when: ("sensors" in group_names) and (install_yaf | default(True))
+
+- name: Create monit definition for bro
+ template: src=monit/bro.monit dest={{ monit_config_home }}/bro.monit
+ when: ("sensors" in group_names) and (install_bro | default(True))
+
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/monit/tasks/monit-stub-definitions.yml
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/monit/tasks/monit-stub-definitions.yml b/metron-deployment/roles/monit/tasks/monit-stub-definitions.yml
new file mode 100644
index 0000000..fde711a
--- /dev/null
+++ b/metron-deployment/roles/monit/tasks/monit-stub-definitions.yml
@@ -0,0 +1,30 @@
+
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+---
+- name: Create monit definition for snort
+ template: src=monit/snort-stub.monit dest={{ monit_config_home }}/snort.monit
+ when: ("sensors" in group_names) and (install_snort | default(True))
+
+- name: Create monit definition for yaf
+ template: src=monit/yaf-stub.monit dest={{ monit_config_home }}/yaf.monit
+ when: ("sensors" in group_names) and (install_yaf | default(True))
+
+- name: Create monit definition for bro
+ template: src=monit/bro-stub.monit dest={{ monit_config_home }}/bro.monit
+ when: ("sensors" in group_names) and (install_bro | default(True))
+
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/monit/templates/monit/bro-stub.monit
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/monit/templates/monit/bro-stub.monit b/metron-deployment/roles/monit/templates/monit/bro-stub.monit
new file mode 100644
index 0000000..54bdbd6
--- /dev/null
+++ b/metron-deployment/roles/monit/templates/monit/bro-stub.monit
@@ -0,0 +1,25 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+check process bro
+ with pidfile /var/run/sensor-stubs-bro.pid
+ start program = "/etc/init.d/sensor-stubs start bro"
+ stop program = "/etc/init.d/sensor-stubs stop bro"
+ if does not exist then restart
+ group bro
+ group sensors
+ group metron
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/monit/templates/monit/snort-stub.monit
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/monit/templates/monit/snort-stub.monit b/metron-deployment/roles/monit/templates/monit/snort-stub.monit
new file mode 100644
index 0000000..b782690
--- /dev/null
+++ b/metron-deployment/roles/monit/templates/monit/snort-stub.monit
@@ -0,0 +1,25 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+check process snort
+ with pidfile /var/run/sensor-stubs-snort.pid
+ start program = "/etc/init.d/sensor-stubs start snort"
+ stop program = "/etc/init.d/sensor-stubs stop snort"
+ if does not exist then restart
+ group snort
+ group sensors
+ group metron
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/monit/templates/monit/yaf-stub.monit
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/monit/templates/monit/yaf-stub.monit b/metron-deployment/roles/monit/templates/monit/yaf-stub.monit
new file mode 100644
index 0000000..2a92a53
--- /dev/null
+++ b/metron-deployment/roles/monit/templates/monit/yaf-stub.monit
@@ -0,0 +1,25 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+check process yaf
+ with pidfile /var/run/sensor-stubs-yaf.pid
+ start program = "/etc/init.d/sensor-stubs start yaf"
+ stop program = "/etc/init.d/sensor-stubs stop yaf"
+ if does not exist then restart
+ group yaf
+ group sensors
+ group metron
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/README.md
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/README.md b/metron-deployment/roles/sensor-stubs/README.md
new file mode 100644
index 0000000..be9b7af
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/README.md
@@ -0,0 +1,85 @@
+
+# Sensor Stubs
+
+A service has been created to simulate the behavior of a sensor by sending canned telemetry data to a Kafka topic. These "Sensor Stubs" consume fewer resources than the actual sensor that they replace.
+
+### (Q) How do the sensor stubs work?
+
+The stubs are installed with a set of canned data for each sensor type; Bro, Snort and YAF. A subset of this canned data is randomly selected and sent to the Kafka topic in batches. The timestamp of each message is updated to match current system time.
+
+### (Q) How do I configure the message rate?
+
+The number of telemetry messages sent in each batch, along with the time delay between batches is configurable. Before installation, these values can be configured by redefining `sensor_stubs_delay` and `sensor_stubs_count`. The values can also be configured by altering the deployed system service script at `/etc/init.d/sensor-stubs`.
+
+### (Q) How do I install the sensor stubs?
+
+Using the default playbooks, this role can be installed by using the Ansible tag `sensor-stubs`. This service is installed on the same hosts where the sensors would be; defined by the `sensors` host group.
+
+The defaults for the "Quick Dev" and "Full Dev" environments have been changed so that the Sensor Stubs are installed by default, rather than the sensors themselves. The Amazon EC2 environment continues to install the original sensors by default.
+
+### (Q) How do I use the sensor stubs?
+
+Start all sensor stubs. The output includes the PID for each running sensor stub.
+```
+$ service sensor-stubs start
+Starting sensor-stubs...
+ bro: Ok [26505]
+ yaf: Ok [26507]
+ snort: Ok [26509]
+```
+
+Check the status of each sensor stub.
+```
+$ service sensor-stubs status
+Checking sensor-stubs...
+ bro: Running [26505]
+ yaf: Running [26507]
+ snort: Running [26509]
+```
+
+Stop all sensor stubs.
+```
+$ service sensor-stubs stop
+Stopping sensor-stubs...
+.. bro: Ok [26505]
+.. yaf: Ok [26507]
+.. snort: Ok [26509]
+```
+
+Check the status. All sensor stubs should be stopped.
+```
+$ service sensor-stubs status
+Checking sensor-stubs...
+ bro: Not running
+ yaf: Not running
+ snort: Not running
+```
+
+Start only the Bro sensor stub.
+```
+$ service sensor-stubs start bro
+Starting sensor-stubs...
+ bro: OK [11616]
+```
+
+Stop the Bro sensor stub.
+```
+$ service sensor-stubs stop bro
+Stopping sensor-stubs...
+.. bro: Ok [11616]
+```
+
+### (Q) How do I install the original sensors?
+
+The default behavior can be changed by skipping the `sensor-stubs` flag and including the `sensors` flag. For example, to deploy "Quick Dev" with the original sensors run the following command.
+
+```
+cd metron-deployment/vagrant/quick-dev-platform
+vagrant --ansible-skip-tags="sensor-stubs,solr" up
+```
+
+### (Q) Where does the mock data come from?
+
+The data produced by the sensor stubs was generated by running the sensors against the example pcap file that is distributed with Metron. This ensures that the data produced by the sensor stubs is similar to the data produced when using the actual sensors.
+
+
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/defaults/main.yml
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/defaults/main.yml b/metron-deployment/roles/sensor-stubs/defaults/main.yml
new file mode 100644
index 0000000..e8efb9e
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/defaults/main.yml
@@ -0,0 +1,25 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+---
+sensor_stubs_home: /opt/sensor-stubs
+sensor_stubs_bin: "{{ sensor_stubs_home }}/bin"
+sensor_stubs_data: "{{ sensor_stubs_home }}/data"
+sensor_stubs_log: /var/log/sensor-stubs.log
+
+sensor_stubs_delay: 2
+sensor_stubs_count: 10
+kafka_home: /usr/hdp/current/kafka-broker
\ No newline at end of file
[4/5] incubator-metron git commit: METRON-659 Emulate Sensors in
Development Environments (nickwallen) closes apache/incubator-metron#417
Posted by ni...@apache.org.
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/files/bro.out
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/files/bro.out b/metron-deployment/roles/sensor-stubs/files/bro.out
new file mode 100644
index 0000000..09cacfd
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/files/bro.out
@@ -0,0 +1,1346 @@
+{"dns": {"ts":1484167797.685113,"uid":"C6MvbX3LOBTaZxwFCd","id.orig_h":"192.168.138.158","id.orig_p":60078,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":18350,"query":"va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"http": {"ts":1484167798.055447,"uid":"CgA8NA4MlyRJmknKpf","id.orig_h":"192.168.138.158","id.orig_p":49184,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in","uri":"/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":560,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F7E6kW3Y9gaoHrgMCf"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167798.772618,"uid":"Cf322m3qSDKAsR8hTi","id.orig_h":"192.168.138.158","id.orig_p":49185,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"ubb67.3c147o.u806a4.w07d919.o5f.f1.b80w.r0faf9.e8mfzdgrf7g0.groupprograms.in","uri":"/","referrer":"http://va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":8973,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Ftwsgz49riOg3FHK8l"],"resp_mime_types":["application/x-shockwave-flash"]}}
+{"dns": {"ts":1484167798.493574,"uid":"CZhu2h4SgVZWdW1aQl","id.orig_h":"192.168.138.158","id.orig_p":65315,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":27248,"query":"ubb67.3c147o.u806a4.w07d919.o5f.f1.b80w.r0faf9.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"dns": {"ts":1484167798.494185,"uid":"Czlibt2NgLkfLp7FPh","id.orig_h":"192.168.138.158","id.orig_p":50683,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":62139,"query":"r03afd2.c3008e.xc07r.b0f.a39.h7f0fa5eu.vb8fbl.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"http": {"ts":1484167799.934294,"uid":"CsWciw2WfERVM0Aczg","id.orig_h":"192.168.138.158","id.orig_p":49188,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/aa25f5fe2875e3d0a244e6969e589cc4","request_body_len":0,"response_body_len":861,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fvq86i4oLSojHBFLSj"]}}
+{"http": {"ts":1484167800.359204,"uid":"C4airn3x7y3KVhZy8i","id.orig_h":"192.168.138.158","id.orig_p":49189,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?b514ee6f0fe486009a6d83b035a4c0bd","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":221184,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FJMtKEAMFuMvzDFJ7"],"resp_mime_types":["application/x-dosexec"]}}
+{"http": {"ts":1484167802.758608,"uid":"CJFa5h4HKSqVViZwbb","id.orig_h":"192.168.138.158","id.orig_p":49190,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?b2566564b3ba1a38e61c83957a7dbcd5","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167803.072425,"uid":"CMOdJA4OzlvgzCK2qf","id.orig_h":"192.168.138.158","id.orig_p":49191,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?3a08b0be8322c244f5a1cb9c1057d941","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167803.402485,"uid":"CJVA893e60mcz43Jrj","id.orig_h":"192.168.138.158","id.orig_p":49192,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?d71e0bd86db9587158745a986a4b3606","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167804.009067,"uid":"C1rmUO2zDsIbgBR8Ik","id.orig_h":"192.168.138.158","id.orig_p":49193,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?34eaf8bd50d85d8c6baacb45f0a7b22e","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167804.312623,"uid":"CCTaln3ggV4dOqGETi","id.orig_h":"192.168.138.158","id.orig_p":49194,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?60dbe33b908e0086292196ef001816bc","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167804.557307,"uid":"CK6DaM2pfjgwi3pY8j","id.orig_h":"192.168.138.158","id.orig_p":49197,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?t=cdcnw7cfz43rmtg","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":134,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["Fkypgg28hizg2EwJRk"],"orig_mime_types":["text/plain"],"resp_fuids":["FqQOjx3rFxTb4RSHE9"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167804.624712,"uid":"Clghht2drNjg3G5dPh","id.orig_h":"192.168.138.158","id.orig_p":49196,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?51424ddd486ff06861fceed24e86b329","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"dns": {"ts":1484167804.053752,"uid":"CoiTkw2sb9stNr10zg","id.orig_h":"192.168.138.158","id.orig_p":53571,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":15553,"query":"ip-addr.es","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["188.165.164.184"],"TTLs":[21599.0],"rejected":false}}
+{"dns": {"ts":1484167804.472938,"uid":"CJodZl3aVCrbHCw7xk","id.orig_h":"192.168.138.158","id.orig_p":61720,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":23625,"query":"runlove.us","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["204.152.254.221"],"TTLs":[14069.0],"rejected":false}}
+{"dns": {"ts":1484167804.737519,"uid":"CkV7Z23iTRHYS1MxCh","id.orig_h":"192.168.138.158","id.orig_p":50509,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":6088,"query":"kritischerkonsum.uni-koeln.de","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484167804.961078,"uid":"CBwIqk3VHRfD9CapGl","id.orig_h":"192.168.138.158","id.orig_p":56753,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":41589,"query":"comarksecurity.com","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["72.34.49.86"],"TTLs":[13888.0],"rejected":false}}
+{"http": {"ts":1484167805.046633,"uid":"CLfH0q2XJiBH0gUngj","id.orig_h":"192.168.138.158","id.orig_p":49198,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?c=cdcnw7cfz43rmtg","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":134,"response_body_len":14,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["F5sGcb3aKKVdqlR4l8"],"orig_mime_types":["text/plain"],"resp_fuids":["FfjQv01KPJAoEcMH1b"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484167807.20478,"uid":"CgI9Lp32cTchxqp8Wk","id.orig_h":"192.168.138.158","id.orig_p":49199,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?l=8r1gf1b2t1kuq42","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":96,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["FDpZNy3tiCh1cjvs19"],"orig_mime_types":["text/plain"],"resp_fuids":["FCCDfF1umBiOBkbAl3"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167807.449353,"uid":"CuowPb45wYWpb50JTe","id.orig_h":"192.168.138.158","id.orig_p":49200,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?t=8r1gf1b2t1kuq42","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":96,"response_body_len":996,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FPM0BMoMv2KB8kbg6"],"orig_mime_types":["text/plain"],"resp_fuids":["F8YBeS1viVGE8sJCOe"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484167810.18734,"uid":"ClAWUw4JlQ6WlHFWCc","id.orig_h":"192.168.138.158","id.orig_p":49201,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?u=mfymi71rapdzk","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":162,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["FMQqcF3hxESuoUxoAi"],"orig_mime_types":["text/plain"],"resp_fuids":["FGxTQj2tNlpA4iyAM7"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167810.407854,"uid":"CTC5QZ37i6qEO6MHef","id.orig_h":"192.168.138.158","id.orig_p":49202,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?u=mfymi71rapdzk","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":162,"response_body_len":45662,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FbWILCRYdYGyU9ZRk"],"orig_mime_types":["text/plain"],"resp_fuids":["FS225I2iUF28vOdi7i"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167816.579111,"uid":"CzJzUp2mgm3oMfTpxk","id.orig_h":"192.168.138.158","id.orig_p":49203,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?f=ka6nnuvccqlw9","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":110,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["F7wKbu2LQZ2q8jSfc5"],"orig_mime_types":["text/plain"],"resp_fuids":["FF9gh04PL6B9Cvlbbl"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167816.846125,"uid":"CozvfM21cOxjQJvB8j","id.orig_h":"192.168.138.158","id.orig_p":49204,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?u=ka6nnuvccqlw9","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":110,"response_body_len":14,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FjWkDS5TCYn9GYRCd"],"orig_mime_types":["text/plain"],"resp_fuids":["FgMrsN3zfIRJ9ipWq6"],"resp_mime_types":["text/plain"]}}
+{"dns": {"ts":1484167810.995898,"uid":"CC18jH3AC7y8NPST2b","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"http": {"ts":1484167804.326254,"uid":"CwFhR03V5JXOYF8Ppk","id.orig_h":"192.168.138.158","id.orig_p":49195,"id.resp_h":"188.165.164.184","id.resp_p":80,"trans_depth":1,"method":"GET","host":"ip-addr.es","uri":"/","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"tags":[]}}
+{"dns": {"ts":1484167842.890717,"uid":"CTvVE015EfMtdMxkU7","id.orig_h":"192.168.138.158","id.orig_p":50329,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":5810,"query":"7oqnsnzwwnm6zb7y.gigapaysun.com","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["95.163.121.204"],"TTLs":[14277.0],"rejected":false}}
+{"http": {"ts":1484167843.102031,"uid":"C0XtwFSGVX0paqsq9","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":3289,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fmv6Ap2EAcThJKped6"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167845.759905,"uid":"C55LNNhjZ7ttzams8","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/style.css","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":4492,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FPQd6A1L85pPPCM7ya"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484167847.5693,"uid":"C55LNNhjZ7ttzams8","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/it.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":552,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fitq9q43ZupDyYoAyk"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167847.568708,"uid":"C0XtwFSGVX0paqsq9","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/us.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":825,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FSuqni2XAHJRnN8bYh"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167847.760685,"uid":"Cg6qof2daZW7072Gq4","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/lt.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":240,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FTT0j8hWM1ENBWINg"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167847.759652,"uid":"CemTNB1OFxbrBn2wD2","id.orig_h":"192.168.138.158","id.orig_p":49208,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/picture.php?k=11iqmfg\u0026b7f2a994c3eaaf014608b272c46cf764","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":1823,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FKu4gy3zUcygg980ee"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167847.760176,"uid":"Cdg2Cf1BnvStDcNm44","id.orig_h":"192.168.138.158","id.orig_p":49207,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/es.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":634,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FoY2NUzH7asqxomge"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167847.776105,"uid":"CUrJ3S149MGwkEQcc","id.orig_h":"192.168.138.158","id.orig_p":49209,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/de.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":534,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fv44d82Oy08X20w3jh"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167849.341698,"uid":"C55LNNhjZ7ttzams8","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/fr.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":694,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F7znd92YPrDeWJkLWb"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167849.558631,"uid":"C0XtwFSGVX0paqsq9","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/rt.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":242,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FKJ5Y92fddrzBWKCb8"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167849.59428,"uid":"Cg6qof2daZW7072Gq4","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/lb.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":239,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F3R4B2XMTLO3hSure"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167849.692474,"uid":"CemTNB1OFxbrBn2wD2","id.orig_h":"192.168.138.158","id.orig_p":49208,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/rb.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":237,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FOoUNQ3OUe0r3e9Ewa"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167851.825173,"uid":"Cdg2Cf1BnvStDcNm44","id.orig_h":"192.168.138.158","id.orig_p":49207,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/favicon.ico","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":318,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F0ASzM1opxGAKE6oMe"],"resp_mime_types":["image/x-icon"]}}
+{"http": {"ts":1484167856.767294,"uid":"CUrJ3S149MGwkEQcc","id.orig_h":"192.168.138.158","id.orig_p":49209,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"POST","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/11iQmfg","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":14,"response_body_len":14641,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FcUgiOBXtoqaQLmed"],"orig_mime_types":["text/plain"],"resp_fuids":["Fp1E561lGpI5pr3S8e"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167859.506315,"uid":"C55LNNhjZ7ttzams8","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":4,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/style.css","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":304,"status_msg":"Not Modified","tags":[]}}
+{"http": {"ts":1484167861.613787,"uid":"C0XtwFSGVX0paqsq9","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":4,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/bitcoin.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":5523,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FZv62C25nyrRv26Mhl"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167861.614577,"uid":"Cg6qof2daZW7072Gq4","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/button_pay.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":727,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FICI2E4Vfpq8wOCTGc"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167798.787714,"uid":"CK8vN03Rc0FuI0R6qk","id.orig_h":"192.168.138.158","id.orig_p":49186,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"r03afd2.c3008e.xc07r.b0f.a39.h7f0fa5eu.vb8fbl.e8mfzdgrf7g0.groupprograms.in","uri":"/","referrer":"http://va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":121635,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F4hDsd3d3xB7Rhef5i"],"resp_mime_types":["text/html"]}}
+{"dns": {"ts":1484167890.789624,"uid":"C3xvTs1NUXOIsMaj55","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":32769,"qclass_name":"qclass-32769","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484167891.791607,"uid":"C3xvTs1NUXOIsMaj55","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484167894.797258,"uid":"C3xvTs1NUXOIsMaj55","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484167903.814905,"uid":"C3xvTs1NUXOIsMaj55","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"http": {"ts":1484167923.810197,"uid":"CaSyqTwPFwYZLa4ra","id.orig_h":"192.168.138.158","id.orig_p":49184,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in","uri":"/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":560,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FmsYkt2F76v7XUBNAd"],"resp_mime_types":["text/html"]}}
+{"dns": {"ts":1484167923.441012,"uid":"C21R6O7H0Kzv5Fdd6","id.orig_h":"192.168.138.158","id.orig_p":60078,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":18350,"query":"va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"http": {"ts":1484167924.511788,"uid":"CRGLdEasAJUDL8Tu4","id.orig_h":"192.168.138.158","id.orig_p":49185,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"ubb67.3c147o.u806a4.w07d919.o5f.f1.b80w.r0faf9.e8mfzdgrf7g0.groupprograms.in","uri":"/","referrer":"http://va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":8973,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FHMpUl2B1lUkpzZoQi"],"resp_mime_types":["application/x-shockwave-flash"]}}
+{"dns": {"ts":1484167924.233822,"uid":"CwNs81Nmjja4ubh79","id.orig_h":"192.168.138.158","id.orig_p":65315,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":27248,"query":"ubb67.3c147o.u806a4.w07d919.o5f.f1.b80w.r0faf9.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"dns": {"ts":1484167924.234067,"uid":"C5GlhlwTDTSQ0b7T7","id.orig_h":"192.168.138.158","id.orig_p":50683,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":62139,"query":"r03afd2.c3008e.xc07r.b0f.a39.h7f0fa5eu.vb8fbl.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"http": {"ts":1484167925.62215,"uid":"Cprvbi2qWL0ZpQ3hT1","id.orig_h":"192.168.138.158","id.orig_p":49188,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/aa25f5fe2875e3d0a244e6969e589cc4","request_body_len":0,"response_body_len":861,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FiZAai2ofPvEPp5aC8"]}}
+{"http": {"ts":1484167926.026722,"uid":"CWFPu12Z6Poy9LL6q3","id.orig_h":"192.168.138.158","id.orig_p":49189,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?b514ee6f0fe486009a6d83b035a4c0bd","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":221184,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FMtkgchK5p70TpU2"],"resp_mime_types":["application/x-dosexec"]}}
+{"http": {"ts":1484167928.239914,"uid":"CuRsfK1BjhmhzlDV45","id.orig_h":"192.168.138.158","id.orig_p":49190,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?b2566564b3ba1a38e61c83957a7dbcd5","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167928.552572,"uid":"CuY6Oe1cwQi28U2sW","id.orig_h":"192.168.138.158","id.orig_p":49191,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?3a08b0be8322c244f5a1cb9c1057d941","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167928.866681,"uid":"C09cX52HiXhkT5Exa2","id.orig_h":"192.168.138.158","id.orig_p":49192,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?d71e0bd86db9587158745a986a4b3606","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167929.401205,"uid":"Cb5L1N1Ug32x6Oz4u3","id.orig_h":"192.168.138.158","id.orig_p":49193,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?34eaf8bd50d85d8c6baacb45f0a7b22e","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167929.705419,"uid":"CAhsP32ytUNibnJDX4","id.orig_h":"192.168.138.158","id.orig_p":49194,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?60dbe33b908e0086292196ef001816bc","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484167929.948512,"uid":"Cj4sal27hxyUSBNdG4","id.orig_h":"192.168.138.158","id.orig_p":49197,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?t=cdcnw7cfz43rmtg","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":134,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["FHBLd84QtlbCemYez2"],"orig_mime_types":["text/plain"],"resp_fuids":["FaaROi4lrbjm1FIpBa"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167930.004132,"uid":"CZiWcw1wYkyuuJ7dn2","id.orig_h":"192.168.138.158","id.orig_p":49196,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?51424ddd486ff06861fceed24e86b329","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"dns": {"ts":1484167929.445849,"uid":"ChakWs1TGdxYbia8H","id.orig_h":"192.168.138.158","id.orig_p":53571,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":15553,"query":"ip-addr.es","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["188.165.164.184"],"TTLs":[21599.0],"rejected":false}}
+{"dns": {"ts":1484167929.865123,"uid":"CVy9AO1a2S9g1ME1D","id.orig_h":"192.168.138.158","id.orig_p":61720,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":23625,"query":"runlove.us","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["204.152.254.221"],"TTLs":[14069.0],"rejected":false}}
+{"dns": {"ts":1484167930.106812,"uid":"CFdDBq1CQI2ScUH7c3","id.orig_h":"192.168.138.158","id.orig_p":50509,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":6088,"query":"kritischerkonsum.uni-koeln.de","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484167930.293382,"uid":"Co0gpI15MTwRMCkjN1","id.orig_h":"192.168.138.158","id.orig_p":56753,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":41589,"query":"comarksecurity.com","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["72.34.49.86"],"TTLs":[13888.0],"rejected":false}}
+{"http": {"ts":1484167930.378501,"uid":"CGfX4Z1TFOkZNVV1Ba","id.orig_h":"192.168.138.158","id.orig_p":49198,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?c=cdcnw7cfz43rmtg","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":134,"response_body_len":14,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FO2LTy2hFvukwN9GFi"],"orig_mime_types":["text/plain"],"resp_fuids":["FacbaL1rZYmMXVxSC7"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484167932.531381,"uid":"CayZYU7BSUC868ND7","id.orig_h":"192.168.138.158","id.orig_p":49199,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?l=8r1gf1b2t1kuq42","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":96,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["F8A2tO2f0GW4SwIiQ1"],"orig_mime_types":["text/plain"],"resp_fuids":["FXQqrf3jpgyu4s2Rka"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167932.764152,"uid":"CrLZ5CuSEtlRc7ZZ8","id.orig_h":"192.168.138.158","id.orig_p":49200,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?t=8r1gf1b2t1kuq42","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":96,"response_body_len":996,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["F8IiLaaCLRBk820Zh"],"orig_mime_types":["text/plain"],"resp_fuids":["FDNU5S22CAykjNpx9b"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484167935.492514,"uid":"CvFLziqvgf8GKC8Y9","id.orig_h":"192.168.138.158","id.orig_p":49201,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?u=mfymi71rapdzk","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":162,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["FtWE1u3rLNc2AU2ZLh"],"orig_mime_types":["text/plain"],"resp_fuids":["FtIwWe2cQZ51hQ8Rv5"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167935.713955,"uid":"CLq0pehvmEuCqLi06","id.orig_h":"192.168.138.158","id.orig_p":49202,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?u=mfymi71rapdzk","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":162,"response_body_len":45662,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FB2jupcXqhiMRiem6"],"orig_mime_types":["text/plain"],"resp_fuids":["FVDw1t7CSEasxpe33"],"resp_mime_types":["image/png"]}}
+{"dns": {"ts":1484167930.866489,"uid":"Cu87p4iMM0QdpiTp6","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"http": {"ts":1484167941.875595,"uid":"CTWWO71KlU9DRrmnp7","id.orig_h":"192.168.138.158","id.orig_p":49203,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?f=ka6nnuvccqlw9","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":110,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["FpJNmm2r9zrMR9EgVg"],"orig_mime_types":["text/plain"],"resp_fuids":["FRwLTg9W436fghxr5"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167942.133849,"uid":"CcQP5R1PG4q2f1yT8","id.orig_h":"192.168.138.158","id.orig_p":49204,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?u=ka6nnuvccqlw9","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":110,"response_body_len":14,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FOy5gi3M2w8XWvNYqc"],"orig_mime_types":["text/plain"],"resp_fuids":["F4zMeEvy9RIBYHdt3"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484167929.718969,"uid":"CU1z6c1RbgzgRhb2E3","id.orig_h":"192.168.138.158","id.orig_p":49195,"id.resp_h":"188.165.164.184","id.resp_p":80,"trans_depth":1,"method":"GET","host":"ip-addr.es","uri":"/","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"tags":[]}}
+{"dns": {"ts":1484167968.175518,"uid":"CogghzajDK9MdvUb3","id.orig_h":"192.168.138.158","id.orig_p":50329,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":5810,"query":"7oqnsnzwwnm6zb7y.gigapaysun.com","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["95.163.121.204"],"TTLs":[14277.0],"rejected":false}}
+{"http": {"ts":1484167968.381714,"uid":"CEmhjI1h5mAzRpnLN1","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":3289,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FkXWFH1GnHj99Fx299"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167971.040006,"uid":"CcaM7Z1MyBBX9E8EC","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/style.css","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":4492,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FJCJeM1R4x1H4y42dg"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484167972.844911,"uid":"CcaM7Z1MyBBX9E8EC","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/it.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":552,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fvu2eI2KDzXQvkD2Dh"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167972.844675,"uid":"CEmhjI1h5mAzRpnLN1","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/us.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":825,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FuSbCP13SdEpnVUFn"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167973.033914,"uid":"Ch2hGO1LrumL0QNPG","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/lt.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":240,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FfcAU83ia8gfjLsWOk"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167973.033427,"uid":"CHwEGq1paXl7IqvzD3","id.orig_h":"192.168.138.158","id.orig_p":49208,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/picture.php?k=11iqmfg\u0026b7f2a994c3eaaf014608b272c46cf764","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":1823,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FfBfWC3nUGssCHBsL2"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167973.033645,"uid":"CzOF6l2DOLLYUZwvG4","id.orig_h":"192.168.138.158","id.orig_p":49207,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/es.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":634,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fil6QO3GWNnrBAiUf"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167973.049027,"uid":"Cbhgaw1IVL6NGqHpn2","id.orig_h":"192.168.138.158","id.orig_p":49209,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/de.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":534,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F4cZLM1Rfj48wYg1Pb"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167974.613828,"uid":"CcaM7Z1MyBBX9E8EC","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/fr.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":694,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FpjJ2mpIuKnU39Gve"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167974.82954,"uid":"CEmhjI1h5mAzRpnLN1","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/rt.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":242,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F9K2Bp4ET8NJaBib48"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167974.864613,"uid":"Ch2hGO1LrumL0QNPG","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/lb.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":239,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FY7LMa40QDG4zeNP5j"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167974.96311,"uid":"CHwEGq1paXl7IqvzD3","id.orig_h":"192.168.138.158","id.orig_p":49208,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/rb.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":237,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FmYeOPLgRfGvDw3hj"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167977.095491,"uid":"CzOF6l2DOLLYUZwvG4","id.orig_h":"192.168.138.158","id.orig_p":49207,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/favicon.ico","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":318,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FUi3FI31tCwo4WgXS3"],"resp_mime_types":["image/x-icon"]}}
+{"http": {"ts":1484167982.036116,"uid":"Cbhgaw1IVL6NGqHpn2","id.orig_h":"192.168.138.158","id.orig_p":49209,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"POST","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/11iQmfg","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":14,"response_body_len":14641,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FC94vR3f72342iAX92"],"orig_mime_types":["text/plain"],"resp_fuids":["Fk4Uzu2jQqXKUB00d5"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484167984.773279,"uid":"CcaM7Z1MyBBX9E8EC","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":4,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/style.css","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":304,"status_msg":"Not Modified","tags":[]}}
+{"http": {"ts":1484167986.879607,"uid":"CEmhjI1h5mAzRpnLN1","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":4,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/bitcoin.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":5523,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FPcM0x2VeblSWANUz6"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484167986.880042,"uid":"Ch2hGO1LrumL0QNPG","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/button_pay.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":727,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fvv1TH12c7JL4UQUa2"],"resp_mime_types":["image/png"]}}
+{"dns": {"ts":1484167995.474042,"uid":"CgRzK32SqF5wJvC0Y4","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"http": {"ts":1484167924.526122,"uid":"CLKLkp1z9ZWAE0eou","id.orig_h":"192.168.138.158","id.orig_p":49186,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"r03afd2.c3008e.xc07r.b0f.a39.h7f0fa5eu.vb8fbl.e8mfzdgrf7g0.groupprograms.in","uri":"/","referrer":"http://va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":121635,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FrcnSsZqVzpjB9o3j"],"resp_mime_types":["text/html"]}}
+{"dns": {"ts":1484168010.822008,"uid":"Cg7uac12cgFflf6Fp7","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":32769,"qclass_name":"qclass-32769","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168011.828379,"uid":"Cg7uac12cgFflf6Fp7","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168014.836836,"uid":"Cg7uac12cgFflf6Fp7","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168023.85904,"uid":"Cg7uac12cgFflf6Fp7","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168048.700291,"uid":"Co6RaRZQIXvwkvaT8","id.orig_h":"192.168.138.158","id.orig_p":60078,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":18350,"query":"va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"http": {"ts":1484168049.069438,"uid":"CeVtdzaICCMxZFAY9","id.orig_h":"192.168.138.158","id.orig_p":49184,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in","uri":"/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":560,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fx1AH04QmVyAYM5kd9"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484168049.769399,"uid":"CZOU9CQKfQzbTKGZ8","id.orig_h":"192.168.138.158","id.orig_p":49185,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"ubb67.3c147o.u806a4.w07d919.o5f.f1.b80w.r0faf9.e8mfzdgrf7g0.groupprograms.in","uri":"/","referrer":"http://va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":8973,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F95sxB3DPck4oMGLmc"],"resp_mime_types":["application/x-shockwave-flash"]}}
+{"dns": {"ts":1484168049.492644,"uid":"CXiPrelEswy2Vy506","id.orig_h":"192.168.138.158","id.orig_p":65315,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":27248,"query":"ubb67.3c147o.u806a4.w07d919.o5f.f1.b80w.r0faf9.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"dns": {"ts":1484168049.492947,"uid":"CddYI711hltuYI1aE7","id.orig_h":"192.168.138.158","id.orig_p":50683,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":62139,"query":"r03afd2.c3008e.xc07r.b0f.a39.h7f0fa5eu.vb8fbl.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"http": {"ts":1484168050.884154,"uid":"CyAev4UQJHk5ECqp6","id.orig_h":"192.168.138.158","id.orig_p":49188,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/aa25f5fe2875e3d0a244e6969e589cc4","request_body_len":0,"response_body_len":861,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FxyuCg3ehaL3Q3Jicf"]}}
+{"http": {"ts":1484168051.288742,"uid":"CpF3KK32282sEULktb","id.orig_h":"192.168.138.158","id.orig_p":49189,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?b514ee6f0fe486009a6d83b035a4c0bd","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":221184,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FbsI7rQSYdyoN8osc"],"resp_mime_types":["application/x-dosexec"]}}
+{"http": {"ts":1484168053.472796,"uid":"CTUxsD4ZOi3CcOT5Tc","id.orig_h":"192.168.138.158","id.orig_p":49190,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?b2566564b3ba1a38e61c83957a7dbcd5","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484168053.7841,"uid":"CYsXRm4a452wUqMdpe","id.orig_h":"192.168.138.158","id.orig_p":49191,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?3a08b0be8322c244f5a1cb9c1057d941","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484168054.099112,"uid":"CQclu54qLZ704kkF4g","id.orig_h":"192.168.138.158","id.orig_p":49192,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?d71e0bd86db9587158745a986a4b3606","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484168054.633374,"uid":"CCOkcA3TQkLzkoUtVb","id.orig_h":"192.168.138.158","id.orig_p":49193,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?34eaf8bd50d85d8c6baacb45f0a7b22e","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"http": {"ts":1484168054.936005,"uid":"CXj9s84H83bRMeXVse","id.orig_h":"192.168.138.158","id.orig_p":49194,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?60dbe33b908e0086292196ef001816bc","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"dns": {"ts":1484168054.677804,"uid":"C0zadr4MkQXXg3R6ad","id.orig_h":"192.168.138.158","id.orig_p":53571,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":15553,"query":"ip-addr.es","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["188.165.164.184"],"TTLs":[21599.0],"rejected":false}}
+{"dns": {"ts":1484168055.095134,"uid":"ChdTCB23ylNPAWtcHj","id.orig_h":"192.168.138.158","id.orig_p":61720,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":23625,"query":"runlove.us","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["204.152.254.221"],"TTLs":[14069.0],"rejected":false}}
+{"http": {"ts":1484168055.178325,"uid":"C48TgT2oKyquocJlgi","id.orig_h":"192.168.138.158","id.orig_p":49197,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?t=cdcnw7cfz43rmtg","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":134,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["Fn5ziO3r1iNx37j0Ml"],"orig_mime_types":["text/plain"],"resp_fuids":["Fqi2yO1cKqX6xLdMEe"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484168055.233385,"uid":"C7A9tv3exoi6fTWTbl","id.orig_h":"192.168.138.158","id.orig_p":49196,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?51424ddd486ff06861fceed24e86b329","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":200,"status_msg":"OK","tags":[]}}
+{"dns": {"ts":1484168055.336209,"uid":"CQgJw93u2weQeXL7ch","id.orig_h":"192.168.138.158","id.orig_p":50509,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":6088,"query":"kritischerkonsum.uni-koeln.de","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168055.522671,"uid":"CcLbIe3Hv8tmqEXAql","id.orig_h":"192.168.138.158","id.orig_p":56753,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":41589,"query":"comarksecurity.com","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["72.34.49.86"],"TTLs":[13888.0],"rejected":false}}
+{"http": {"ts":1484168055.607448,"uid":"CUlrzm2SQPBB5osl6k","id.orig_h":"192.168.138.158","id.orig_p":49198,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?c=cdcnw7cfz43rmtg","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":134,"response_body_len":14,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["F4QJql3CmvlqjPZ62c"],"orig_mime_types":["text/plain"],"resp_fuids":["FvG9Y93qeCBMqZaxl2"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484168057.760379,"uid":"CdUJwG2Df90m0Y7OSi","id.orig_h":"192.168.138.158","id.orig_p":49199,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?l=8r1gf1b2t1kuq42","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":96,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["Fh9CoH303MQ3vTRjB"],"orig_mime_types":["text/plain"],"resp_fuids":["F9iisA25ZMf02F0vS5"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484168057.992988,"uid":"CRAvCZ2ozjOE5ZgU9d","id.orig_h":"192.168.138.158","id.orig_p":49200,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?t=8r1gf1b2t1kuq42","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":96,"response_body_len":996,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FslJp33fnKpZkHE8y2"],"orig_mime_types":["text/plain"],"resp_fuids":["FJ8xAA0UPebOG5gAc"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484168060.720375,"uid":"CXT1m84PFOVKcQCote","id.orig_h":"192.168.138.158","id.orig_p":49201,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?u=mfymi71rapdzk","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":162,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["FOsK283Q71ZIaQFli"],"orig_mime_types":["text/plain"],"resp_fuids":["FqXoIQ1Wo0FMhwXkm"],"resp_mime_types":["text/html"]}}
+{"dns": {"ts":1484168050.914926,"uid":"CopjWUPbl0jgVvxuf","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"http": {"ts":1484168060.941201,"uid":"C759hO3qWwA0XQqi4g","id.orig_h":"192.168.138.158","id.orig_p":49202,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?u=mfymi71rapdzk","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":162,"response_body_len":45662,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FruxXL3ovqxbl9ZEt1"],"orig_mime_types":["text/plain"],"resp_fuids":["FXITBL1jZa8vBZWhOd"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168067.100666,"uid":"C8Np8A35YX2amygMVb","id.orig_h":"192.168.138.158","id.orig_p":49203,"id.resp_h":"204.152.254.221","id.resp_p":80,"trans_depth":1,"method":"POST","host":"runlove.us","uri":"/wp-content/themes/twentyfifteen/img5.php?f=ka6nnuvccqlw9","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":110,"response_body_len":357,"status_code":404,"status_msg":"Not Found","tags":[],"orig_fuids":["FYxhwp2IpRU8tG2ED1"],"orig_mime_types":["text/plain"],"resp_fuids":["F7VCjtX86bUyVy3R2"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484168067.360726,"uid":"CI33ir4V9AqRYIQDSc","id.orig_h":"192.168.138.158","id.orig_p":49204,"id.resp_h":"72.34.49.86","id.resp_p":80,"trans_depth":1,"method":"POST","host":"comarksecurity.com","uri":"/wp-content/themes/grizzly/img5.php?u=ka6nnuvccqlw9","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":110,"response_body_len":14,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FSMLvV1wZHnHEWiRg6"],"orig_mime_types":["text/plain"],"resp_fuids":["FbdBIa2cOLEETy8ZM6"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484168054.949144,"uid":"CpYseO3TyKre605q5h","id.orig_h":"192.168.138.158","id.orig_p":49195,"id.resp_h":"188.165.164.184","id.resp_p":80,"trans_depth":1,"method":"GET","host":"ip-addr.es","uri":"/","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"tags":[]}}
+{"dns": {"ts":1484168093.401627,"uid":"CQC8Pm4Qo5KRLMYqpe","id.orig_h":"192.168.138.158","id.orig_p":50329,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":5810,"query":"7oqnsnzwwnm6zb7y.gigapaysun.com","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["95.163.121.204"],"TTLs":[14277.0],"rejected":false}}
+{"http": {"ts":1484168093.608251,"uid":"CsUjA541poEzvhMfuf","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":3289,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FOov1rV6rL28n8qy1"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484168096.264793,"uid":"CZdkwD4Kbxc8UZOD6k","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/style.css","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":4492,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FZjJMI3o09BdFRIgU7"],"resp_mime_types":["text/plain"]}}
+{"http": {"ts":1484168098.07042,"uid":"CZdkwD4Kbxc8UZOD6k","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/it.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":552,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FEoclLaLEjZvuZZt9"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168098.069604,"uid":"CsUjA541poEzvhMfuf","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/us.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":825,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FelBi52nX055gNTqoh"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168098.259569,"uid":"CuQjtm2b1ZTs5e0AHj","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/lt.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":240,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F39o293n7WwhocflC7"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168098.259081,"uid":"CrtAyZ2wczgi6YrAch","id.orig_h":"192.168.138.158","id.orig_p":49208,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/picture.php?k=11iqmfg\u0026b7f2a994c3eaaf014608b272c46cf764","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":1823,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FB79Dm1t9dSUOI5eY6"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168098.259316,"uid":"CBmCBG2XG9D8KFerSi","id.orig_h":"192.168.138.158","id.orig_p":49207,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/es.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":634,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FJ14zE3SRYHfEVUBK6"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168098.274642,"uid":"C4PRKe3tPbLrANnoql","id.orig_h":"192.168.138.158","id.orig_p":49209,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":1,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/de.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":534,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fh4WuDHfRrX302wDj"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168099.839755,"uid":"CZdkwD4Kbxc8UZOD6k","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/fr.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":694,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F8viU44xUigTtf4F4"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168100.055845,"uid":"CsUjA541poEzvhMfuf","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/rt.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":242,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FlQf7j3HXl7ZvoKcwe"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168100.091007,"uid":"CuQjtm2b1ZTs5e0AHj","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/lb.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":239,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FqRNLE44JylF8wuffj"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168100.188585,"uid":"CrtAyZ2wczgi6YrAch","id.orig_h":"192.168.138.158","id.orig_p":49208,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/rb.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":237,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FAq3rD1EezTPYh1XVi"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168102.320148,"uid":"CBmCBG2XG9D8KFerSi","id.orig_h":"192.168.138.158","id.orig_p":49207,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/favicon.ico","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":318,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FsRCRQ1rW7SviqZ7rf"],"resp_mime_types":["image/x-icon"]}}
+{"dns": {"ts":1484168094.52272,"uid":"Chr2FK36PUE9wFhItb","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"http": {"ts":1484168107.260553,"uid":"C4PRKe3tPbLrANnoql","id.orig_h":"192.168.138.158","id.orig_p":49209,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":2,"method":"POST","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/11iQmfg","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":14,"response_body_len":14641,"status_code":200,"status_msg":"OK","tags":[],"orig_fuids":["FoLJFr1bniaMScBzXa"],"orig_mime_types":["text/plain"],"resp_fuids":["FMKGGw1xJPXlLO2r2"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484168109.998211,"uid":"CZdkwD4Kbxc8UZOD6k","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":4,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/style.css","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":0,"status_code":304,"status_msg":"Not Modified","tags":[]}}
+{"http": {"ts":1484168112.105378,"uid":"CsUjA541poEzvhMfuf","id.orig_h":"192.168.138.158","id.orig_p":49205,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":4,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/bitcoin.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":5523,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FGcm94EWzm8st4LQj"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168112.106225,"uid":"CuQjtm2b1ZTs5e0AHj","id.orig_h":"192.168.138.158","id.orig_p":49210,"id.resp_h":"95.163.121.204","id.resp_p":80,"trans_depth":3,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/button_pay.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":727,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FpDS0Lu22MwpGf8ac"],"resp_mime_types":["image/png"]}}
+{"http": {"ts":1484168049.78326,"uid":"CJ8TuiTOmndD9weBa","id.orig_h":"192.168.138.158","id.orig_p":49186,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"r03afd2.c3008e.xc07r.b0f.a39.h7f0fa5eu.vb8fbl.e8mfzdgrf7g0.groupprograms.in","uri":"/","referrer":"http://va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":121635,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FXdaxF1PjrvmYbJfLg"],"resp_mime_types":["text/html"]}}
+{"dns": {"ts":1484168130.768775,"uid":"CSpFkT2sFGZoEEZ3gi","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":32769,"qclass_name":"qclass-32769","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168131.774252,"uid":"CSpFkT2sFGZoEEZ3gi","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168134.783524,"uid":"CSpFkT2sFGZoEEZ3gi","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168143.802793,"uid":"CSpFkT2sFGZoEEZ3gi","id.orig_h":"192.168.66.1","id.orig_p":5353,"id.resp_h":"224.0.0.251","id.resp_p":5353,"proto":"udp","trans_id":0,"query":"_googlecast._tcp.local","qclass":1,"qclass_name":"C_INTERNET","qtype":12,"qtype_name":"PTR","AA":false,"TC":false,"RD":false,"RA":false,"Z":0,"rejected":false}}
+{"dns": {"ts":1484168173.926757,"uid":"CVf8zv3sBOdNwWTrbl","id.orig_h":"192.168.138.158","id.orig_p":60078,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":18350,"query":"va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"dns": {"ts":1484168174.717258,"uid":"CCbfqc3ox2hz3kqRSj","id.orig_h":"192.168.138.158","id.orig_p":65315,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":27248,"query":"ubb67.3c147o.u806a4.w07d919.o5f.f1.b80w.r0faf9.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"dns": {"ts":1484168174.717487,"uid":"CSHdCU2z9CrpPiMuXk","id.orig_h":"192.168.138.158","id.orig_p":50683,"id.resp_h":"192.168.138.2","id.resp_p":53,"proto":"udp","trans_id":62139,"query":"r03afd2.c3008e.xc07r.b0f.a39.h7f0fa5eu.vb8fbl.e8mfzdgrf7g0.groupprograms.in","qclass":1,"qclass_name":"C_INTERNET","qtype":1,"qtype_name":"A","rcode":0,"rcode_name":"NOERROR","AA":false,"TC":false,"RD":true,"RA":true,"Z":0,"answers":["62.75.195.236"],"TTLs":[29.0],"rejected":false}}
+{"http": {"ts":1484168174.29515,"uid":"CHg4AB2DzmEvPnlJoi","id.orig_h":"192.168.138.158","id.orig_p":49184,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in","uri":"/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":560,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["FbYOC42kRE93hxmUOb"],"resp_mime_types":["text/html"]}}
+{"http": {"ts":1484168174.994035,"uid":"C3MrJz2uc4HxL7lCZg","id.orig_h":"192.168.138.158","id.orig_p":49185,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"ubb67.3c147o.u806a4.w07d919.o5f.f1.b80w.r0faf9.e8mfzdgrf7g0.groupprograms.in","uri":"/","referrer":"http://va872g.g90e1h.b8.642b63u.j985a2.v33e.37.pa269cc.e8mfzdgrf7g0.groupprograms.in/?285a4d4e4e5a4d4d4649584c5d43064b4745","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":8973,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fz99Ml4Hgbcn29QSMa"],"resp_mime_types":["application/x-shockwave-flash"]}}
+{"http": {"ts":1484168176.096419,"uid":"CZerqX2fu5NcfhGiZj","id.orig_h":"192.168.138.158","id.orig_p":49188,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/aa25f5fe2875e3d0a244e6969e589cc4","request_body_len":0,"response_body_len":861,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["Fixn8N2eNk8O3WwOti"]}}
+{"http": {"ts":1484168176.500568,"uid":"C7fLUD28ahyzAuVnAl","id.orig_h":"192.168.138.158","id.orig_p":49189,"id.resp_h":"62.75.195.236","id.resp_p":80,"trans_depth":1,"method":"GET","host":"62.75.195.236","uri":"/?b514ee6f0fe486009a6d83b035a4c0bd","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":221184,"status_code":200,"status_msg":"OK","tags":[],"resp_fuid
<TRUNCATED>
[3/5] incubator-metron git commit: METRON-659 Emulate Sensors in
Development Environments (nickwallen) closes apache/incubator-metron#417
Posted by ni...@apache.org.
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/files/snort.out
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/files/snort.out b/metron-deployment/roles/sensor-stubs/files/snort.out
new file mode 100644
index 0000000..32f9a53
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/files/snort.out
@@ -0,0 +1,27404 @@
+01/11/17-20:49:18.107168 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E396BFC,0x56900BB6,,0x1000,64,10,23403,76,77824,,,,
+01/11/17-20:49:18.107195 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900BB6,0x1E396C14,,0x1F13,64,16,3894,52,53248,,,,
+01/11/17-20:49:18.107396 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396C14,0x56900BCE,,0xFFF,64,8,40177,52,53248,,,,
+01/11/17-20:49:18.107510 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0xDA,***AP***,0x1E396C14,0x56900BCE,,0x1000,64,10,53179,204,208896,,,,
+01/11/17-20:49:18.109884 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396CAC,0x56900C16,,0xFFD,64,8,30920,52,53248,,,,
+01/11/17-20:49:18.132533 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396CAC,0x56900C7E,,0xFFC,64,8,44619,52,53248,,,,
+01/11/17-20:49:18.132540 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396CAC,0x56900CAE,,0xFFE,64,8,55021,52,53248,,,,
+01/11/17-20:49:18.132751 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E396CAC,0x56900CAE,,0x1000,64,10,24370,76,77824,,,,
+01/11/17-20:49:18.154679 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E396CC4,0x56900CAE,,0x1000,64,10,50877,92,94208,,,,
+01/11/17-20:49:18.154802 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900CAE,0x1E396CEC,,0x1F13,64,16,3899,52,53248,,,,
+01/11/17-20:49:18.155051 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396CEC,0x56900CC6,,0xFFF,64,8,6931,52,53248,,,,
+01/11/17-20:49:18.155074 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x82,***AP***,0x1E396CEC,0x56900CC6,,0x1000,64,10,50478,116,118784,,,,
+01/11/17-20:49:18.165247 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396D2C,0x56900CF6,,0xFFE,64,8,57108,52,53248,,,,
+01/11/17-20:49:18.315958 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E396D2C,0x56900CF6,,0x1000,64,10,31240,92,94208,,,,
+01/11/17-20:49:18.315973 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E396D2C,0x56900CF6,,0x1000,64,8,51328,92,94208,,,,
+01/11/17-20:49:18.315979 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x4E,***A****,0x56900CF6,0x1E396D54,,0x1F13,64,16,3902,64,65536,,,,
+01/11/17-20:49:18.317192 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396D54,0x56900D0E,,0xFFF,64,8,8422,52,53248,,,,
+01/11/17-20:49:18.317376 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E396D54,0x56900D0E,,0x1000,64,10,26873,92,94208,,,,
+01/11/17-20:49:18.317729 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396D7C,0x56900D26,,0xFFF,64,8,63956,52,53248,,,,
+01/11/17-20:49:18.318013 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E396D7C,0x56900D26,,0x1000,64,10,21452,92,94208,,,,
+01/11/17-20:49:18.318328 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396DA4,0x56900D3E,,0xFFF,64,8,64316,52,53248,,,,
+01/11/17-20:49:18.323894 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E396DA4,0x56900D3E,,0x1000,64,10,49851,92,94208,,,,
+01/11/17-20:49:18.324357 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E396DCC,0x56900D56,,0xFFF,64,8,54379,52,53248,,,,
+01/11/17-20:49:18.325050 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E396DCC,0x56900D56,,0x1000,64,10,63932,1500,225300,,,,
+01/11/17-20:49:18.325060 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x432,***AP***,0x1E397374,0x56900D56,,0x1000,64,10,34229,1060,36880,,,,
+01/11/17-20:49:18.325065 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D56,0x1E397764,,0x1F13,64,16,3907,52,53248,,,,
+01/11/17-20:49:18.325419 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E397764,0x56900D56,,0x1000,64,10,59177,1500,225300,,,,
+01/11/17-20:49:18.325425 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E397D0C,0x56900D56,,0x1000,64,10,49253,1500,225300,,,,
+01/11/17-20:49:18.325427 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D56,0x1E3982B4,,0x1F13,64,16,3908,52,53248,,,,
+01/11/17-20:49:18.325439 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x4A,***AP***,0x1E3982B4,0x56900D56,,0x1000,64,10,12980,60,61440,,,,
+01/11/17-20:49:18.325798 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3982BC,0x56900D56,,0x1000,64,10,17183,1500,225300,,,,
+01/11/17-20:49:18.325803 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D56,0x1E398864,,0x1F13,64,16,3909,52,53248,,,,
+01/11/17-20:49:18.325813 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x292,***AP***,0x1E398864,0x56900D56,,0x1000,64,10,10585,644,135176,,,,
+01/11/17-20:49:18.326167 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E398AB4,0x56900D56,,0x1000,64,10,64378,1500,225300,,,,
+01/11/17-20:49:18.326173 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D56,0x1E39905C,,0x1F13,64,16,3910,52,53248,,,,
+01/11/17-20:49:18.326183 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x392,***AP***,0x1E39905C,0x56900D56,,0x1000,64,10,36369,900,135180,,,,
+01/11/17-20:49:18.326185 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3993AC,0x56900D56,,0x1000,64,10,42540,92,94208,,,,
+01/11/17-20:49:18.330409 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D56,0x1E3993D4,,0x1F13,64,16,3911,52,53248,,,,
+01/11/17-20:49:18.331204 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3993D4,0x56900D6E,,0xFFF,64,8,42136,52,53248,,,,
+01/11/17-20:49:18.331625 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3993D4,0x56900D6E,,0x1000,64,10,48207,1500,225300,,,,
+01/11/17-20:49:18.331641 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x132,***AP***,0x1E39997C,0x56900D6E,,0x1000,64,10,21064,292,36868,,,,
+01/11/17-20:49:18.331645 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D6E,0x1E399A6C,,0x1F13,64,16,3913,52,53248,,,,
+01/11/17-20:49:18.331923 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E399A6C,0x56900D6E,,0x1000,64,10,15105,1500,225300,,,,
+01/11/17-20:49:18.331938 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x1E2,***AP***,0x1E39A014,0x56900D6E,,0x1000,64,10,1341,468,217092,,,,
+01/11/17-20:49:18.331941 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D6E,0x1E39A1B4,,0x1F13,64,16,3914,52,53248,,,,
+01/11/17-20:49:18.332270 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39A1B4,0x56900D6E,,0x1000,64,10,10751,1500,225300,,,,
+01/11/17-20:49:18.332284 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0xB2,***AP***,0x1E39A75C,0x56900D6E,,0x1000,64,10,2115,164,167936,,,,
+01/11/17-20:49:18.332286 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D6E,0x1E39A7CC,,0x1F13,64,16,3915,52,53248,,,,
+01/11/17-20:49:18.332650 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39A7CC,0x56900D6E,,0x1000,64,10,10561,1500,225300,,,,
+01/11/17-20:49:18.332655 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x322,***AP***,0x1E39AD74,0x56900D6E,,0x1000,64,10,42742,788,20492,,,,
+01/11/17-20:49:18.332658 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D6E,0x1E39B054,,0x1F13,64,16,3916,52,53248,,,,
+01/11/17-20:49:18.333034 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39B054,0x56900D6E,,0x1000,64,10,56541,1500,225300,,,,
+01/11/17-20:49:18.333048 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x3C2,***AP***,0x1E39B5FC,0x56900D6E,,0x1000,64,10,25591,948,184332,,,,
+01/11/17-20:49:18.333052 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D6E,0x1E39B97C,,0x1F13,64,16,3917,52,53248,,,,
+01/11/17-20:49:18.333403 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39B97C,0x56900D86,,0xFFF,64,8,24503,52,53248,,,,
+01/11/17-20:49:18.333409 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39B97C,0x56900D86,,0x1000,64,10,63480,1500,225300,,,,
+01/11/17-20:49:18.333421 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x3D2,***AP***,0x1E39BF24,0x56900D86,,0x1000,64,10,61701,964,200716,,,,
+01/11/17-20:49:18.333424 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D86,0x1E39C2B4,,0x1F13,64,16,3919,52,53248,,,,
+01/11/17-20:49:18.333816 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39C2B4,0x56900D86,,0x1000,64,10,25421,1500,225300,,,,
+01/11/17-20:49:18.333820 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x302,***AP***,0x1E39C85C,0x56900D86,,0x1000,64,10,25178,756,249864,,,,
+01/11/17-20:49:18.333822 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900D86,0x1E39CB1C,,0x1F13,64,16,3920,52,53248,,,,
+01/11/17-20:49:18.334060 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CB1C,0x56900D9E,,0xFFF,64,8,59095,52,53248,,,,
+01/11/17-20:49:18.334219 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E39CB1C,0x56900D9E,,0x1000,64,10,61490,92,94208,,,,
+01/11/17-20:49:18.334426 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CB44,0x56900DB6,,0xFFF,64,8,62611,52,53248,,,,
+01/11/17-20:49:18.334608 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E39CB44,0x56900DB6,,0x1000,64,10,33533,76,77824,,,,
+01/11/17-20:49:18.335128 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CB5C,0x56900DFE,,0xFFD,64,8,44344,52,53248,,,,
+01/11/17-20:49:18.335229 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E39CB5C,0x56900DFE,,0x1000,64,10,65063,76,77824,,,,
+01/11/17-20:49:18.348745 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E39CB74,0x56900DFE,,0x1000,64,10,45295,92,94208,,,,
+01/11/17-20:49:18.348795 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900DFE,0x1E39CB9C,,0x1F13,64,16,3924,52,53248,,,,
+01/11/17-20:49:18.349013 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CB9C,0x56900E16,,0xFFF,64,8,20224,52,53248,,,,
+01/11/17-20:49:18.349132 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x23A,***AP***,0x1E39CB9C,0x56900E16,,0x1000,64,10,37526,556,45064,,,,
+01/11/17-20:49:18.352001 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CD94,0x56900E5E,,0xFFD,64,8,37910,52,53248,,,,
+01/11/17-20:49:18.383171 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CD94,0x56900E96,,0xFFE,64,8,36703,52,53248,,,,
+01/11/17-20:49:18.441681 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CD94,0x56900ECE,,0xFFE,64,8,55590,52,53248,,,,
+01/11/17-20:49:18.451874 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CD94,0x56900F2E,,0xFFD,64,8,19749,52,53248,,,,
+01/11/17-20:49:18.452037 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E39CD94,0x56900F2E,,0x1000,64,10,168,76,77824,,,,
+01/11/17-20:49:18.491519 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900F2E,0x1E39CDAC,,0x1F13,64,16,3930,52,53248,,,,
+01/11/17-20:49:28.469092 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E39CDAC,0x56900F2E,,0x1000,64,10,30215,76,77824,,,,
+01/11/17-20:49:28.469122 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56900F2E,0x1E39CDC4,,0x1F13,64,16,3931,52,53248,,,,
+01/11/17-20:49:28.469442 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CDC4,0x56900F46,,0xFFF,64,8,17853,52,53248,,,,
+01/11/17-20:49:28.469543 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0xDA,***AP***,0x1E39CDC4,0x56900F46,,0x1000,64,10,25675,204,208896,,,,
+01/11/17-20:49:28.470972 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CE5C,0x56900F8E,,0xFFD,64,8,39640,52,53248,,,,
+01/11/17-20:49:28.482209 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CE5C,0x56900FE6,,0xFFD,64,8,45105,52,53248,,,,
+01/11/17-20:49:28.482287 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CE5C,0x56901016,,0xFFE,64,8,44659,52,53248,,,,
+01/11/17-20:49:28.482352 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E39CE5C,0x56901016,,0x1000,64,10,64668,76,77824,,,,
+01/11/17-20:49:28.500940 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E39CE74,0x56901016,,0x1000,64,10,18360,92,94208,,,,
+01/11/17-20:49:28.501082 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901016,0x1E39CE9C,,0x1F13,64,16,3936,52,53248,,,,
+01/11/17-20:49:28.501262 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CE9C,0x5690102E,,0xFFF,64,8,33893,52,53248,,,,
+01/11/17-20:49:28.501342 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x82,***AP***,0x1E39CE9C,0x5690102E,,0x1000,64,10,50754,116,118784,,,,
+01/11/17-20:49:28.502358 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CEDC,0x5690105E,,0xFFE,64,8,42796,52,53248,,,,
+01/11/17-20:49:28.502487 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E39CEDC,0x5690105E,,0x1000,64,10,9919,92,94208,,,,
+01/11/17-20:49:28.512827 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CF04,0x56901076,,0xFFF,64,8,49447,52,53248,,,,
+01/11/17-20:49:28.512959 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E39CF04,0x56901076,,0x1000,64,10,29403,92,94208,,,,
+01/11/17-20:49:28.513418 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CF2C,0x5690108E,,0xFFF,64,8,19625,52,53248,,,,
+01/11/17-20:49:28.513717 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E39CF2C,0x5690108E,,0x1000,64,10,21710,92,94208,,,,
+01/11/17-20:49:28.514000 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CF54,0x569010A6,,0xFFF,64,8,10409,52,53248,,,,
+01/11/17-20:49:28.519867 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E39CF54,0x569010A6,,0x1000,64,10,7830,92,94208,,,,
+01/11/17-20:49:28.520589 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39CF7C,0x569010BE,,0xFFF,64,8,6502,52,53248,,,,
+01/11/17-20:49:28.520731 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39CF7C,0x569010BE,,0x1000,64,10,51267,1500,225300,,,,
+01/11/17-20:49:28.520747 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x432,***AP***,0x1E39D524,0x569010BE,,0x1000,64,10,15295,1060,36880,,,,
+01/11/17-20:49:28.520750 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010BE,0x1E39D914,,0x1F13,64,16,3943,52,53248,,,,
+01/11/17-20:49:28.521160 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39D914,0x569010BE,,0x1000,64,10,42479,1500,225300,,,,
+01/11/17-20:49:28.521166 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39DEBC,0x569010BE,,0x1000,64,10,65233,1500,225300,,,,
+01/11/17-20:49:28.521168 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010BE,0x1E39E464,,0x1F13,64,16,3944,52,53248,,,,
+01/11/17-20:49:28.521179 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x4A,***AP***,0x1E39E464,0x569010BE,,0x1000,64,10,6499,60,61440,,,,
+01/11/17-20:49:28.521543 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39E46C,0x569010BE,,0x1000,64,10,36882,1500,225300,,,,
+01/11/17-20:49:28.521548 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010BE,0x1E39EA14,,0x1F13,64,16,3945,52,53248,,,,
+01/11/17-20:49:28.521559 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x292,***AP***,0x1E39EA14,0x569010BE,,0x1000,64,10,49793,644,135176,,,,
+01/11/17-20:49:28.522079 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39EC64,0x569010BE,,0x1000,64,10,56708,1500,225300,,,,
+01/11/17-20:49:28.522084 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010BE,0x1E39F20C,,0x1F13,64,16,3946,52,53248,,,,
+01/11/17-20:49:28.522105 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x392,***AP***,0x1E39F20C,0x569010BE,,0x1000,64,10,33698,900,135180,,,,
+01/11/17-20:49:28.522107 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E39F55C,0x569010BE,,0x1000,64,10,15201,92,94208,,,,
+01/11/17-20:49:28.522148 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010BE,0x1E39F584,,0x1F13,64,16,3947,52,53248,,,,
+01/11/17-20:49:28.522763 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E39F584,0x569010D6,,0xFFF,64,8,64832,52,53248,,,,
+01/11/17-20:49:28.522911 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39F584,0x569010D6,,0x1000,64,10,18426,1500,225300,,,,
+01/11/17-20:49:28.522933 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x132,***AP***,0x1E39FB2C,0x569010D6,,0x1000,64,10,55360,292,36868,,,,
+01/11/17-20:49:28.522938 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010D6,0x1E39FC1C,,0x1F13,64,16,3949,52,53248,,,,
+01/11/17-20:49:28.523205 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E39FC1C,0x569010D6,,0x1000,64,10,4284,1500,225300,,,,
+01/11/17-20:49:28.523209 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x1E2,***AP***,0x1E3A01C4,0x569010D6,,0x1000,64,10,12946,468,217092,,,,
+01/11/17-20:49:28.523211 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010D6,0x1E3A0364,,0x1F13,64,16,3950,52,53248,,,,
+01/11/17-20:49:28.523456 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A0364,0x569010D6,,0x1000,64,10,7500,1500,225300,,,,
+01/11/17-20:49:28.523459 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0xB2,***AP***,0x1E3A090C,0x569010D6,,0x1000,64,10,40144,164,167936,,,,
+01/11/17-20:49:28.523461 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010D6,0x1E3A097C,,0x1F13,64,16,3951,52,53248,,,,
+01/11/17-20:49:28.523873 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A097C,0x569010D6,,0x1000,64,10,16560,1500,225300,,,,
+01/11/17-20:49:28.523877 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x322,***AP***,0x1E3A0F24,0x569010D6,,0x1000,64,10,36010,788,20492,,,,
+01/11/17-20:49:28.523880 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010D6,0x1E3A1204,,0x1F13,64,16,3952,52,53248,,,,
+01/11/17-20:49:28.524221 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A1204,0x569010D6,,0x1000,64,10,63499,1500,225300,,,,
+01/11/17-20:49:28.524225 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x3C2,***AP***,0x1E3A17AC,0x569010D6,,0x1000,64,10,48918,948,184332,,,,
+01/11/17-20:49:28.524227 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010D6,0x1E3A1B2C,,0x1F13,64,16,3953,52,53248,,,,
+01/11/17-20:49:28.524579 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A1B2C,0x569010D6,,0x1000,64,10,10124,1500,225300,,,,
+01/11/17-20:49:28.524582 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x3D2,***AP***,0x1E3A20D4,0x569010D6,,0x1000,64,10,60584,964,200716,,,,
+01/11/17-20:49:28.524585 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010D6,0x1E3A2464,,0x1F13,64,16,3954,52,53248,,,,
+01/11/17-20:49:28.524889 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A2464,0x569010D6,,0x1000,64,10,30197,1500,225300,,,,
+01/11/17-20:49:28.524893 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x302,***AP***,0x1E3A2A0C,0x569010D6,,0x1000,64,10,14240,756,249864,,,,
+01/11/17-20:49:28.524895 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569010D6,0x1E3A2CCC,,0x1F13,64,16,3955,52,53248,,,,
+01/11/17-20:49:28.525595 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2CCC,0x569010EE,,0xFFF,64,8,44823,52,53248,,,,
+01/11/17-20:49:28.525764 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2CCC,0x56901106,,0xFFF,64,8,60365,52,53248,,,,
+01/11/17-20:49:28.525893 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A2CCC,0x56901106,,0x1000,64,10,22857,92,94208,,,,
+01/11/17-20:49:28.526459 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2CF4,0x5690111E,,0xFFF,64,8,36935,52,53248,,,,
+01/11/17-20:49:28.526578 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A2CF4,0x5690111E,,0x1000,64,10,1319,76,77824,,,,
+01/11/17-20:49:28.527102 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2D0C,0x56901166,,0xFFD,64,8,14691,52,53248,,,,
+01/11/17-20:49:28.527180 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A2D0C,0x56901166,,0x1000,64,10,32628,76,77824,,,,
+01/11/17-20:49:28.540964 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A2D24,0x56901166,,0x1000,64,10,52141,92,94208,,,,
+01/11/17-20:49:28.541023 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901166,0x1E3A2D4C,,0x1F13,64,16,3960,52,53248,,,,
+01/11/17-20:49:28.541279 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2D4C,0x5690117E,,0xFFF,64,8,49024,52,53248,,,,
+01/11/17-20:49:28.541440 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x23A,***AP***,0x1E3A2D4C,0x5690117E,,0x1000,64,10,64071,556,45064,,,,
+01/11/17-20:49:28.542767 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2F44,0x569011C6,,0xFFD,64,8,20305,52,53248,,,,
+01/11/17-20:49:28.568085 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2F44,0x569011FE,,0xFFE,64,8,35412,52,53248,,,,
+01/11/17-20:49:28.618582 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2F44,0x56901236,,0xFFE,64,8,60632,52,53248,,,,
+01/11/17-20:49:28.626337 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2F44,0x56901296,,0xFFD,64,8,20453,52,53248,,,,
+01/11/17-20:49:28.626346 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A2F44,0x56901296,,0x1000,64,10,3210,76,77824,,,,
+01/11/17-20:49:28.671946 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901296,0x1E3A2F5C,,0x1F13,64,16,3966,52,53248,,,,
+01/11/17-20:49:38.644842 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A2F5C,0x56901296,,0x1000,64,10,35540,76,77824,,,,
+01/11/17-20:49:38.644865 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901296,0x1E3A2F74,,0x1F13,64,16,3967,52,53248,,,,
+01/11/17-20:49:38.645301 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A2F74,0x569012AE,,0xFFF,64,8,38915,52,53248,,,,
+01/11/17-20:49:38.645410 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0xDA,***AP***,0x1E3A2F74,0x569012AE,,0x1000,64,10,49946,204,208896,,,,
+01/11/17-20:49:38.655935 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A300C,0x569012F6,,0xFFD,64,8,49982,52,53248,,,,
+01/11/17-20:49:38.678474 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A300C,0x5690135E,,0xFFC,64,8,32965,52,53248,,,,
+01/11/17-20:49:38.678482 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A300C,0x5690138E,,0xFFE,64,8,24815,52,53248,,,,
+01/11/17-20:49:38.678626 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A300C,0x5690138E,,0x1000,64,10,26150,76,77824,,,,
+01/11/17-20:49:38.698531 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A3024,0x5690138E,,0x1000,64,10,57225,92,94208,,,,
+01/11/17-20:49:38.698676 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x5690138E,0x1E3A304C,,0x1F13,64,16,3972,52,53248,,,,
+01/11/17-20:49:38.698875 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A304C,0x569013A6,,0xFFF,64,8,22084,52,53248,,,,
+01/11/17-20:49:38.698882 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x82,***AP***,0x1E3A304C,0x569013A6,,0x1000,64,10,64622,116,118784,,,,
+01/11/17-20:49:38.699881 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A308C,0x569013D6,,0xFFE,64,8,44450,52,53248,,,,
+01/11/17-20:49:38.700138 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A308C,0x569013D6,,0x1000,64,10,42900,92,94208,,,,
+01/11/17-20:49:38.710613 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A30B4,0x569013EE,,0xFFF,64,8,64776,52,53248,,,,
+01/11/17-20:49:38.710768 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A30B4,0x569013EE,,0x1000,64,10,19867,92,94208,,,,
+01/11/17-20:49:38.711060 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A30DC,0x56901406,,0xFFF,64,8,52782,52,53248,,,,
+01/11/17-20:49:38.711262 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A30DC,0x56901406,,0x1000,64,10,10692,92,94208,,,,
+01/11/17-20:49:38.711505 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A3104,0x5690141E,,0xFFF,64,8,8814,52,53248,,,,
+01/11/17-20:49:38.717620 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A3104,0x5690141E,,0x1000,64,10,62092,92,94208,,,,
+01/11/17-20:49:38.718189 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A312C,0x56901436,,0xFFF,64,8,42105,52,53248,,,,
+01/11/17-20:49:38.718603 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A312C,0x56901436,,0x1000,64,10,64933,1500,225300,,,,
+01/11/17-20:49:38.718608 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x432,***AP***,0x1E3A36D4,0x56901436,,0x1000,64,10,26575,1060,36880,,,,
+01/11/17-20:49:38.718612 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901436,0x1E3A3AC4,,0x1F13,64,16,3979,52,53248,,,,
+01/11/17-20:49:38.718937 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A3AC4,0x56901436,,0x1000,64,10,43647,1500,225300,,,,
+01/11/17-20:49:38.718952 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A406C,0x56901436,,0x1000,64,10,31758,1500,225300,,,,
+01/11/17-20:49:38.718955 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901436,0x1E3A4614,,0x1F13,64,16,3980,52,53248,,,,
+01/11/17-20:49:38.718963 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x4A,***AP***,0x1E3A4614,0x56901436,,0x1000,64,10,22512,60,61440,,,,
+01/11/17-20:49:38.719298 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A461C,0x56901436,,0x1000,64,10,21591,1500,225300,,,,
+01/11/17-20:49:38.719302 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901436,0x1E3A4BC4,,0x1F13,64,16,3981,52,53248,,,,
+01/11/17-20:49:38.719322 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x292,***AP***,0x1E3A4BC4,0x56901436,,0x1000,64,10,59325,644,135176,,,,
+01/11/17-20:49:38.719683 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A4E14,0x56901436,,0x1000,64,10,60528,1500,225300,,,,
+01/11/17-20:49:38.719689 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901436,0x1E3A53BC,,0x1F13,64,16,3982,52,53248,,,,
+01/11/17-20:49:38.719707 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x392,***AP***,0x1E3A53BC,0x56901436,,0x1000,64,10,51009,900,135180,,,,
+01/11/17-20:49:38.719709 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A570C,0x56901436,,0x1000,64,10,10473,92,94208,,,,
+01/11/17-20:49:38.719789 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901436,0x1E3A5734,,0x1F13,64,16,3983,52,53248,,,,
+01/11/17-20:49:38.720104 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A5734,0x5690144E,,0xFFF,64,8,62478,52,53248,,,,
+01/11/17-20:49:38.720549 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A5734,0x5690144E,,0x1000,64,10,24986,1500,225300,,,,
+01/11/17-20:49:38.720564 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x132,***AP***,0x1E3A5CDC,0x5690144E,,0x1000,64,10,53439,292,36868,,,,
+01/11/17-20:49:38.720567 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x5690144E,0x1E3A5DCC,,0x1F13,64,16,3985,52,53248,,,,
+01/11/17-20:49:38.720952 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A5DCC,0x5690144E,,0x1000,64,10,59946,1500,225300,,,,
+01/11/17-20:49:38.720973 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x1E2,***AP***,0x1E3A6374,0x5690144E,,0x1000,64,10,27663,468,217092,,,,
+01/11/17-20:49:38.720977 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x5690144E,0x1E3A6514,,0x1F13,64,16,3986,52,53248,,,,
+01/11/17-20:49:38.721423 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A6514,0x5690144E,,0x1000,64,10,6032,1500,225300,,,,
+01/11/17-20:49:38.721430 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0xB2,***AP***,0x1E3A6ABC,0x5690144E,,0x1000,64,10,21413,164,167936,,,,
+01/11/17-20:49:38.721433 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x5690144E,0x1E3A6B2C,,0x1F13,64,16,3987,52,53248,,,,
+01/11/17-20:49:38.721836 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A6B2C,0x5690144E,,0x1000,64,10,28700,1500,225300,,,,
+01/11/17-20:49:38.721841 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x322,***AP***,0x1E3A70D4,0x5690144E,,0x1000,64,10,11267,788,20492,,,,
+01/11/17-20:49:38.721844 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x5690144E,0x1E3A73B4,,0x1F13,64,16,3988,52,53248,,,,
+01/11/17-20:49:38.722366 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A73B4,0x5690144E,,0x1000,64,10,23915,1500,225300,,,,
+01/11/17-20:49:38.722373 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x3C2,***AP***,0x1E3A795C,0x5690144E,,0x1000,64,10,22812,948,184332,,,,
+01/11/17-20:49:38.722377 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x5690144E,0x1E3A7CDC,,0x1F13,64,16,3989,52,53248,,,,
+01/11/17-20:49:38.722666 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A7CDC,0x5690144E,,0x1000,64,10,56330,1500,225300,,,,
+01/11/17-20:49:38.722669 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x3D2,***AP***,0x1E3A8284,0x5690144E,,0x1000,64,10,9418,964,200716,,,,
+01/11/17-20:49:38.722672 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A8614,0x56901466,,0xFFF,64,8,54552,52,53248,,,,
+01/11/17-20:49:38.722709 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901466,0x1E3A8614,,0x1F13,64,16,3991,52,53248,,,,
+01/11/17-20:49:38.723188 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A8614,0x56901466,,0x1000,64,10,36476,1500,225300,,,,
+01/11/17-20:49:38.723194 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x302,***AP***,0x1E3A8BBC,0x56901466,,0x1000,64,10,5160,756,249864,,,,
+01/11/17-20:49:38.723197 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901466,0x1E3A8E7C,,0x1F13,64,16,3992,52,53248,,,,
+01/11/17-20:49:38.723727 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A8E7C,0x5690147E,,0xFFF,64,8,58139,52,53248,,,,
+01/11/17-20:49:38.723829 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A8E7C,0x5690147E,,0x1000,64,10,13602,92,94208,,,,
+01/11/17-20:49:38.724393 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A8EA4,0x56901496,,0xFFF,64,8,7887,52,53248,,,,
+01/11/17-20:49:38.724427 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A8EA4,0x56901496,,0x1000,64,10,26953,76,77824,,,,
+01/11/17-20:49:38.725021 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A8EBC,0x569014DE,,0xFFD,64,8,9083,52,53248,,,,
+01/11/17-20:49:38.725028 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A8EBC,0x569014DE,,0x1000,64,10,25776,76,77824,,,,
+01/11/17-20:49:38.739469 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A8ED4,0x569014DE,,0x1000,64,10,30246,92,94208,,,,
+01/11/17-20:49:38.739600 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569014DE,0x1E3A8EFC,,0x1F13,64,16,3996,52,53248,,,,
+01/11/17-20:49:38.739910 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A8EFC,0x569014F6,,0xFFF,64,8,41919,52,53248,,,,
+01/11/17-20:49:38.740117 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x23A,***AP***,0x1E3A8EFC,0x569014F6,,0x1000,64,10,37312,556,45064,,,,
+01/11/17-20:49:38.741314 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A90F4,0x5690153E,,0xFFD,64,8,17721,52,53248,,,,
+01/11/17-20:49:38.771156 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A90F4,0x56901576,,0xFFE,64,8,55944,52,53248,,,,
+01/11/17-20:49:38.829875 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A90F4,0x569015BE,,0xFFD,64,8,4622,52,53248,,,,
+01/11/17-20:49:38.838484 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A90F4,0x5690161E,,0xFFD,64,8,12690,52,53248,,,,
+01/11/17-20:49:38.838557 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A90F4,0x5690161E,,0x1000,64,10,6352,76,77824,,,,
+01/11/17-20:49:38.864196 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A910C,0x5690161E,,0x1000,64,10,42677,76,77824,,,,
+01/11/17-20:49:38.864547 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x5690161E,0x1E3A9124,,0x1F13,64,16,4002,52,53248,,,,
+01/11/17-20:49:38.864823 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A9124,0x56901636,,0xFFF,64,8,62716,52,53248,,,,
+01/11/17-20:49:38.864973 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0xDA,***AP***,0x1E3A9124,0x56901636,,0x1000,64,10,18619,204,208896,,,,
+01/11/17-20:49:38.866516 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A91BC,0x5690167E,,0xFFD,64,8,13402,52,53248,,,,
+01/11/17-20:49:38.884253 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A91BC,0x569016E6,,0xFFC,64,8,23445,52,53248,,,,
+01/11/17-20:49:38.884262 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A91BC,0x56901716,,0xFFE,64,8,15998,52,53248,,,,
+01/11/17-20:49:38.884421 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3A91BC,0x56901716,,0x1000,64,10,37876,76,77824,,,,
+01/11/17-20:49:38.907086 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A91D4,0x56901716,,0x1000,64,10,41998,92,94208,,,,
+01/11/17-20:49:38.907273 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901716,0x1E3A91FC,,0x1F13,64,16,4007,52,53248,,,,
+01/11/17-20:49:38.907498 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A91FC,0x5690172E,,0xFFF,64,8,2031,52,53248,,,,
+01/11/17-20:49:38.907674 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x82,***AP***,0x1E3A91FC,0x5690172E,,0x1000,64,10,65433,116,118784,,,,
+01/11/17-20:49:38.909097 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A923C,0x5690175E,,0xFFE,64,8,41174,52,53248,,,,
+01/11/17-20:49:38.909108 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A923C,0x5690175E,,0x1000,64,10,28977,92,94208,,,,
+01/11/17-20:49:38.950050 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x5690175E,0x1E3A9264,,0x1F13,64,16,4010,52,53248,,,,
+01/11/17-20:49:38.952099 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A9264,0x56901776,,0xFFF,64,8,20145,52,53248,,,,
+01/11/17-20:49:38.952254 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A9264,0x56901776,,0x1000,64,10,1604,92,94208,,,,
+01/11/17-20:49:38.952898 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901776,0x1E3A928C,,0x1F13,64,16,4012,52,53248,,,,
+01/11/17-20:49:38.955697 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A928C,0x5690178E,,0xFFF,64,8,29670,52,53248,,,,
+01/11/17-20:49:38.955918 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A928C,0x5690178E,,0x1000,64,10,41295,92,94208,,,,
+01/11/17-20:49:38.957143 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A92B4,0x569017A6,,0xFFF,64,8,53853,52,53248,,,,
+01/11/17-20:49:38.965865 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3A92B4,0x569017A6,,0x1000,64,10,34049,92,94208,,,,
+01/11/17-20:49:38.969753 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3A92DC,0x569017BE,,0xFFF,64,8,18267,52,53248,,,,
+01/11/17-20:49:38.970498 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A92DC,0x569017BE,,0x1000,64,10,33394,1500,225300,,,,
+01/11/17-20:49:38.970508 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x432,***AP***,0x1E3A9884,0x569017BE,,0x1000,64,10,24966,1060,36880,,,,
+01/11/17-20:49:38.970511 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017BE,0x1E3A9C74,,0x1F13,64,16,4016,52,53248,,,,
+01/11/17-20:49:38.971108 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3A9C74,0x569017BE,,0x1000,64,10,2345,1500,225300,,,,
+01/11/17-20:49:38.971119 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3AA21C,0x569017BE,,0x1000,64,10,63264,1500,225300,,,,
+01/11/17-20:49:38.971123 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017BE,0x1E3AA7C4,,0x1F13,64,16,4017,52,53248,,,,
+01/11/17-20:49:38.971144 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3AA7C4,0x569017BE,,0x1000,64,10,38086,76,77824,,,,
+01/11/17-20:49:38.971566 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3AA7DC,0x569017BE,,0x1000,64,10,15052,1500,225300,,,,
+01/11/17-20:49:38.971575 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017BE,0x1E3AAD84,,0x1F13,64,16,4018,52,53248,,,,
+01/11/17-20:49:38.971602 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x292,***AP***,0x1E3AAD84,0x569017BE,,0x1000,64,10,23674,644,135176,,,,
+01/11/17-20:49:38.971871 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3AAFD4,0x569017BE,,0x1000,64,10,48549,1500,225300,,,,
+01/11/17-20:49:38.971876 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017BE,0x1E3AB57C,,0x1F13,64,16,4019,52,53248,,,,
+01/11/17-20:49:38.971888 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x392,***AP***,0x1E3AB57C,0x569017BE,,0x1000,64,10,2232,900,135180,,,,
+01/11/17-20:49:38.971890 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3AB8CC,0x569017BE,,0x1000,64,10,11241,92,94208,,,,
+01/11/17-20:49:38.974036 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017BE,0x1E3AB8F4,,0x1F13,64,16,4020,52,53248,,,,
+01/11/17-20:49:38.974671 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AB8F4,0x569017D6,,0xFFF,64,8,57358,52,53248,,,,
+01/11/17-20:49:38.974986 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3AB8F4,0x569017D6,,0x1000,64,10,60275,1500,225300,,,,
+01/11/17-20:49:38.974992 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x132,***AP***,0x1E3ABE9C,0x569017D6,,0x1000,64,10,29505,292,36868,,,,
+01/11/17-20:49:38.974995 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017D6,0x1E3ABF8C,,0x1F13,64,16,4022,52,53248,,,,
+01/11/17-20:49:38.975462 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3ABF8C,0x569017D6,,0x1000,64,10,62499,1500,225300,,,,
+01/11/17-20:49:38.975466 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x1E2,***AP***,0x1E3AC534,0x569017D6,,0x1000,64,10,47337,468,217092,,,,
+01/11/17-20:49:38.975469 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017D6,0x1E3AC6D4,,0x1F13,64,16,4023,52,53248,,,,
+01/11/17-20:49:38.975865 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3AC6D4,0x569017D6,,0x1000,64,10,33384,1500,225300,,,,
+01/11/17-20:49:38.975870 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0xB2,***AP***,0x1E3ACC7C,0x569017D6,,0x1000,64,10,34219,164,167936,,,,
+01/11/17-20:49:38.975873 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017D6,0x1E3ACCEC,,0x1F13,64,16,4024,52,53248,,,,
+01/11/17-20:49:38.976279 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3ACCEC,0x569017D6,,0x1000,64,10,39935,1500,225300,,,,
+01/11/17-20:49:38.976284 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x322,***AP***,0x1E3AD294,0x569017D6,,0x1000,64,10,65405,788,20492,,,,
+01/11/17-20:49:38.976287 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017D6,0x1E3AD574,,0x1F13,64,16,4025,52,53248,,,,
+01/11/17-20:49:38.976672 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3AD574,0x569017D6,,0x1000,64,10,47260,1500,225300,,,,
+01/11/17-20:49:38.976677 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x3C2,***AP***,0x1E3ADB1C,0x569017D6,,0x1000,64,10,7038,948,184332,,,,
+01/11/17-20:49:38.976680 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017D6,0x1E3ADE9C,,0x1F13,64,16,4026,52,53248,,,,
+01/11/17-20:49:38.977244 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3ADE9C,0x569017D6,,0x1000,64,10,57825,1500,225300,,,,
+01/11/17-20:49:38.977252 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x3D2,***AP***,0x1E3AE444,0x569017D6,,0x1000,64,10,14750,964,200716,,,,
+01/11/17-20:49:38.977256 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017D6,0x1E3AE7D4,,0x1F13,64,16,4027,52,53248,,,,
+01/11/17-20:49:38.977582 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AE7D4,0x569017EE,,0xFFF,64,8,40965,52,53248,,,,
+01/11/17-20:49:38.977740 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5EA,***A****,0x1E3AE7D4,0x569017EE,,0x1000,64,10,25235,1500,225300,,,,
+01/11/17-20:49:38.977746 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x302,***AP***,0x1E3AED7C,0x569017EE,,0x1000,64,10,37899,756,249864,,,,
+01/11/17-20:49:38.977748 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569017EE,0x1E3AF03C,,0x1F13,64,16,4029,52,53248,,,,
+01/11/17-20:49:38.978306 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AF03C,0x56901806,,0xFFF,64,8,5277,52,53248,,,,
+01/11/17-20:49:38.978429 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3AF03C,0x56901806,,0x1000,64,10,39595,92,94208,,,,
+01/11/17-20:49:38.978660 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AF064,0x5690181E,,0xFFF,64,8,18434,52,53248,,,,
+01/11/17-20:49:38.978743 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3AF064,0x5690181E,,0x1000,64,10,59548,76,77824,,,,
+01/11/17-20:49:38.979085 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AF07C,0x56901866,,0xFFD,64,8,64094,52,53248,,,,
+01/11/17-20:49:38.979195 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3AF07C,0x56901866,,0x1000,64,10,27814,76,77824,,,,
+01/11/17-20:49:38.996191 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x6A,***AP***,0x1E3AF094,0x56901866,,0x1000,64,10,58142,92,94208,,,,
+01/11/17-20:49:38.996344 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x56901866,0x1E3AF0BC,,0x1F13,64,16,4033,52,53248,,,,
+01/11/17-20:49:38.996582 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AF0BC,0x5690187E,,0xFFF,64,8,40934,52,53248,,,,
+01/11/17-20:49:38.996788 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x23A,***AP***,0x1E3AF0BC,0x5690187E,,0x1000,64,10,41880,556,45064,,,,
+01/11/17-20:49:38.998362 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AF2B4,0x569018C6,,0xFFD,64,8,46597,52,53248,,,,
+01/11/17-20:49:39.029755 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AF2B4,0x569018FE,,0xFFE,64,8,50704,52,53248,,,,
+01/11/17-20:49:39.090878 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AF2B4,0x56901946,,0xFFD,64,8,58336,52,53248,,,,
+01/11/17-20:49:39.103926 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x1E3AF2B4,0x569019A6,,0xFFD,64,8,6076,52,53248,,,,
+01/11/17-20:49:39.103935 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,49581,192.168.66.121,22,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x5A,***AP***,0x1E3AF2B4,0x569019A6,,0x1000,64,10,7481,76,77824,,,,
+01/11/17-20:49:39.144528 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,22,192.168.66.1,49581,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x569019A6,0x1E3AF2CC,,0x1F13,64,16,4039,52,53248,,,,
+01/11/17-20:49:41.685007 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x4E,12****S*,0x89DE3802,0x0,,0xFFFF,64,0,37837,64,65536,,,,
+01/11/17-20:49:41.685041 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50181,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x4A,*2*A**S*,0x412FE1F9,0x89DE3803,,0x3890,64,0,0,60,61440,,,,
+01/11/17-20:49:41.685270 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3803,0x412FE1FA,,0x1015,64,0,45378,52,53248,,,,
+01/11/17-20:49:41.685291 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x203,***AP***,0x89DE3803,0x412FE1FA,,0x1015,64,2,31618,501,250884,,,,
+01/11/17-20:49:41.685297 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50181,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x412FE1FA,0x89DE39C4,,0x7A,64,0,35921,52,53248,,,,
+01/11/17-20:49:41.702785 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE39C4,0x412FEAB5,,0xFE7,64,0,31331,52,53248,,,,
+01/11/17-20:49:41.708304 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x1E0,***AP***,0x89DE39C4,0x412FEAB5,,0x1000,64,2,55934,466,215044,,,,
+01/11/17-20:49:41.708865 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x4E,12****S*,0xE53A56EE,0x0,,0xFFFF,64,0,35683,64,65536,,,,
+01/11/17-20:49:41.708880 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50182,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x4A,*2*A**S*,0x18588B4A,0xE53A56EF,,0x3890,64,0,0,60,61440,,,,
+01/11/17-20:49:41.709029 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A56EF,0x18588B4B,,0x1015,64,0,32055,52,53248,,,,
+01/11/17-20:49:41.709146 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x1DD,***AP***,0xE53A56EF,0x18588B4B,,0x1015,64,2,10852,463,211972,,,,
+01/11/17-20:49:41.709154 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50182,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x18588B4B,0xE53A588A,,0x7A,64,0,59016,52,53248,,,,
+01/11/17-20:49:41.710292 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x4E,12****S*,0x8365AF51,0x0,,0xFFFF,64,0,7652,64,65536,,,,
+01/11/17-20:49:41.710309 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50183,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x4A,*2*A**S*,0x8DE9822F,0x8365AF52,,0x3890,64,0,0,60,61440,,,,
+01/11/17-20:49:41.710470 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365AF52,0x8DE98230,,0x1015,64,0,60499,52,53248,,,,
+01/11/17-20:49:41.710664 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x1D0,***AP***,0x8365AF52,0x8DE98230,,0x1015,64,2,49526,450,198660,,,,
+01/11/17-20:49:41.710674 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50183,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x8DE98230,0x8365B0E0,,0x7A,64,0,61429,52,53248,,,,
+01/11/17-20:49:41.713117 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x4E,******S*,0x39818AB4,0x0,,0xFFFF,64,0,31071,64,65536,,,,
+01/11/17-20:49:41.713131 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50184,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x4A,***A**S*,0xA874A3E9,0x39818AB5,,0x3890,64,0,0,60,61440,,,,
+01/11/17-20:49:41.713287 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818AB5,0xA874A3EA,,0x1015,64,0,63436,52,53248,,,,
+01/11/17-20:49:41.713427 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x1CD,***AP***,0x39818AB5,0xA874A3EA,,0x1015,64,0,50310,447,195588,,,,
+01/11/17-20:49:41.713435 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50184,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0xA874A3EA,0x39818C40,,0x7A,64,0,52781,52,53248,,,,
+01/11/17-20:49:41.735024 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE98D80,,0xFBB,64,0,60492,52,53248,,,,
+01/11/17-20:49:41.735121 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE998D0,,0xFA5,64,0,27946,52,53248,,,,
+01/11/17-20:49:41.735230 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9A420,,0xF4B,64,0,12533,52,53248,,,,
+01/11/17-20:49:41.735368 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9AF70,,0xEF0,64,0,61911,52,53248,,,,
+01/11/17-20:49:41.735487 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9BAC0,,0xE96,64,0,32463,52,53248,,,,
+01/11/17-20:49:41.735764 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9C610,,0xE3B,64,0,41222,52,53248,,,,
+01/11/17-20:49:41.735771 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9C610,,0x1000,64,0,17505,52,53248,,,,
+01/11/17-20:49:41.735934 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9D160,,0xFA5,64,0,6378,52,53248,,,,
+01/11/17-20:49:41.735939 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9DCB0,,0xF4B,64,0,50978,52,53248,,,,
+01/11/17-20:49:41.736031 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9E800,,0xEF0,64,0,41992,52,53248,,,,
+01/11/17-20:49:41.736034 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9F350,,0xE96,64,0,40068,52,53248,,,,
+01/11/17-20:49:41.736039 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DE9FEA0,,0xE3B,64,0,4465,52,53248,,,,
+01/11/17-20:49:41.736130 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA0365,,0xE15,64,0,64175,52,53248,,,,
+01/11/17-20:49:41.736242 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA0365,,0x1000,64,0,60532,52,53248,,,,
+01/11/17-20:49:41.736790 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA0798,,0xFDE,64,0,1924,52,53248,,,,
+01/11/17-20:49:41.740496 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA079E,,0xFFF,64,0,12835,52,53248,,,,
+01/11/17-20:49:41.747598 ,1,999158,0,"'snort test alert'",TCP,192.168.66.121,8080,192.168.66.1,50181,08:00:27:E8:B0:7A,0A:00:27:00:00:00,0x42,***A****,0x412FEAB5,0x89DE3B62,,0x82,64,0,35924,52,53248,,,,
+01/11/17-20:49:41.757549 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858969B,,0xFBB,64,0,20679,52,53248,,,,
+01/11/17-20:49:41.758290 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858A1EB,,0xFA5,64,0,44022,52,53248,,,,
+01/11/17-20:49:41.758399 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858AD3B,,0xF4B,64,0,28875,52,53248,,,,
+01/11/17-20:49:41.758404 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858B88B,,0xEF0,64,0,43317,52,53248,,,,
+01/11/17-20:49:41.758405 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858C3DB,,0xE96,64,0,55975,52,53248,,,,
+01/11/17-20:49:41.758406 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858C3DB,,0x1000,64,0,19782,52,53248,,,,
+01/11/17-20:49:41.758408 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858CF2B,,0xFA5,64,0,63139,52,53248,,,,
+01/11/17-20:49:41.759044 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858CF2B,,0x1000,64,0,49835,52,53248,,,,
+01/11/17-20:49:41.771340 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x412FF605,,0xFA5,64,0,44665,52,53248,,,,
+01/11/17-20:49:41.773636 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41300155,,0xF4B,64,0,6905,52,53248,,,,
+01/11/17-20:49:41.773648 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41300CA5,,0xEF0,64,0,61971,52,53248,,,,
+01/11/17-20:49:41.773653 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x413017F5,,0xE96,64,0,31949,52,53248,,,,
+01/11/17-20:49:41.773656 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41302345,,0xE3B,64,0,48816,52,53248,,,,
+01/11/17-20:49:41.773658 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41302345,,0xEBB,64,0,30870,52,53248,,,,
+01/11/17-20:49:41.773660 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41302345,,0x1000,64,0,8585,52,53248,,,,
+01/11/17-20:49:41.773662 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41302E95,,0xFA5,64,0,61708,52,53248,,,,
+01/11/17-20:49:41.773664 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41302E95,,0x1000,64,0,38538,52,53248,,,,
+01/11/17-20:49:41.777099 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858DA7B,,0xFA5,64,0,23510,52,53248,,,,
+01/11/17-20:49:41.777115 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858E5CB,,0xF4B,64,0,16857,52,53248,,,,
+01/11/17-20:49:41.777119 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858F11B,,0xEF0,64,0,34551,52,53248,,,,
+01/11/17-20:49:41.777122 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x1858FC6B,,0xE96,64,0,63082,52,53248,,,,
+01/11/17-20:49:41.777127 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x185907BB,,0xE3B,64,0,37755,52,53248,,,,
+01/11/17-20:49:41.777129 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18590C70,,0xE15,64,0,42363,52,53248,,,,
+01/11/17-20:49:41.777132 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18590F7F,,0xDFD,64,0,8363,52,53248,,,,
+01/11/17-20:49:41.777134 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x413039E5,,0xFA5,64,0,11423,52,53248,,,,
+01/11/17-20:49:41.777248 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41304535,,0xF4B,64,0,53395,52,53248,,,,
+01/11/17-20:49:41.777254 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41305085,,0xEF0,64,0,42374,52,53248,,,,
+01/11/17-20:49:41.777256 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41305BD5,,0xE96,64,0,27546,52,53248,,,,
+01/11/17-20:49:41.777259 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41306725,,0xE3B,64,0,42745,52,53248,,,,
+01/11/17-20:49:41.777261 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41306BDA,,0xE15,64,0,64435,52,53248,,,,
+01/11/17-20:49:41.777264 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18590F7F,,0x1000,64,0,43557,52,53248,,,,
+01/11/17-20:49:41.777266 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41306BDA,,0x1000,64,0,46958,52,53248,,,,
+01/11/17-20:49:41.778744 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x4130772A,,0xFA5,64,0,14812,52,53248,,,,
+01/11/17-20:49:41.778811 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41307BED,,0xF7F,64,0,16449,52,53248,,,,
+01/11/17-20:49:41.778817 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41307BED,,0x1000,64,0,32765,52,53248,,,,
+01/11/17-20:49:41.779807 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41307BF3,,0xFFF,64,0,61783,52,53248,,,,
+01/11/17-20:49:41.779816 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18590F85,,0xFFF,64,0,21799,52,53248,,,,
+01/11/17-20:49:41.780562 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874AF3A,,0xFBB,64,0,41668,52,53248,,,,
+01/11/17-20:49:41.780593 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874BA8A,,0xF60,64,0,44575,52,53248,,,,
+01/11/17-20:49:41.780611 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874BA8A,,0xFCB,64,0,60316,52,53248,,,,
+01/11/17-20:49:41.780614 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874C5DA,,0xF70,64,0,29140,52,53248,,,,
+01/11/17-20:49:41.781366 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874D12A,,0xF16,64,0,29289,52,53248,,,,
+01/11/17-20:49:41.781471 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874DC7A,,0xEBB,64,0,29562,52,53248,,,,
+01/11/17-20:49:41.781478 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874E7CA,,0xE61,64,0,48236,52,53248,,,,
+01/11/17-20:49:41.781624 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874F31A,,0xE06,64,0,39280,52,53248,,,,
+01/11/17-20:49:41.781630 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874FE6A,,0xDAC,64,0,8700,52,53248,,,,
+01/11/17-20:49:41.781633 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA874FE6A,,0x1000,64,0,10159,52,53248,,,,
+01/11/17-20:49:41.781924 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA87509BA,,0xFA5,64,0,11390,52,53248,,,,
+01/11/17-20:49:41.781933 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA87509BA,,0x1000,64,0,24685,52,53248,,,,
+01/11/17-20:49:41.781936 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA875150A,,0xFA5,64,0,3366,52,53248,,,,
+01/11/17-20:49:41.781938 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA875205A,,0xF4B,64,0,36802,52,53248,,,,
+01/11/17-20:49:41.781941 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA875205A,,0x1000,64,0,13880,52,53248,,,,
+01/11/17-20:49:41.781943 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8752BAA,,0xFA5,64,0,27392,52,53248,,,,
+01/11/17-20:49:41.781945 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA875360B,,0xF52,64,0,28642,52,53248,,,,
+01/11/17-20:49:41.781949 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8753611,,0xF52,64,0,55533,52,53248,,,,
+01/11/17-20:49:41.782121 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8753611,,0x1000,64,0,43032,52,53248,,,,
+01/11/17-20:49:41.799072 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA12EE,,0xFA5,64,0,30116,52,53248,,,,
+01/11/17-20:49:41.799086 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA1E3E,,0xF4B,64,0,57836,52,53248,,,,
+01/11/17-20:49:41.799089 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41308743,,0xFA5,64,0,45743,52,53248,,,,
+01/11/17-20:49:41.799096 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41309293,,0xF4B,64,0,19041,52,53248,,,,
+01/11/17-20:49:41.799099 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41309BF3,,0xF00,64,0,56110,52,53248,,,,
+01/11/17-20:49:41.799101 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41309F20,,0xEE6,64,0,14796,52,53248,,,,
+01/11/17-20:49:41.799103 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA279E,,0xF00,64,0,42649,52,53248,,,,
+01/11/17-20:49:41.799106 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA279E,,0x1000,64,0,13788,52,53248,,,,
+01/11/17-20:49:41.799107 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41309F20,,0x1000,64,0,44776,52,53248,,,,
+01/11/17-20:49:41.799109 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50181,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x89DE3B62,0x41309F25,,0xFFF,64,0,2086,52,53248,,,,
+01/11/17-20:49:41.799832 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18591AD5,,0xFA5,64,0,64984,52,53248,,,,
+01/11/17-20:49:41.799898 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18591AD5,,0x1000,64,0,3933,52,53248,,,,
+01/11/17-20:49:41.799900 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18592625,,0xFA5,64,0,16728,52,53248,,,,
+01/11/17-20:49:41.800244 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18592F85,,0xF5A,64,0,16089,52,53248,,,,
+01/11/17-20:49:41.800252 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18592F85,,0x1000,64,0,49727,52,53248,,,,
+01/11/17-20:49:41.800410 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18592F8D,,0xFFF,64,0,46722,52,53248,,,,
+01/11/17-20:49:41.800418 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA27A6,,0xFFF,64,0,44196,52,53248,,,,
+01/11/17-20:49:41.800513 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x18593ADD,,0xFA5,64,0,62171,52,53248,,,,
+01/11/17-20:49:41.800519 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x185944C2,,0xF56,64,0,16322,52,53248,,,,
+01/11/17-20:49:41.800523 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x185944C9,,0xF55,64,0,48908,52,53248,,,,
+01/11/17-20:49:41.800525 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA32F6,,0xFA5,64,0,41536,52,53248,,,,
+01/11/17-20:49:41.800559 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA3E46,,0xF4A,64,0,5801,52,53248,,,,
+01/11/17-20:49:41.800563 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50182,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0xE53A588A,0x185944C9,,0x1000,64,0,38774,52,53248,,,,
+01/11/17-20:49:41.800565 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA47A6,,0xEFF,64,0,15422,52,53248,,,,
+01/11/17-20:49:41.800567 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA47A6,,0x1000,64,0,5924,52,53248,,,,
+01/11/17-20:49:41.809759 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA47AD,,0xFFF,64,0,44728,52,53248,,,,
+01/11/17-20:49:41.809787 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50183,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x8365B0E0,0x8DEA5293,,0xFA8,64,0,19718,52,53248,,,,
+01/11/17-20:49:41.810740 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8754161,,0xFA5,64,0,7993,52,53248,,,,
+01/11/17-20:49:41.810762 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8754161,,0x1000,64,0,58879,52,53248,,,,
+01/11/17-20:49:41.810764 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8754CB1,,0xFA5,64,0,785,52,53248,,,,
+01/11/17-20:49:41.810767 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8755611,,0xF5A,64,0,54091,52,53248,,,,
+01/11/17-20:49:41.812571 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8755611,,0x1000,64,0,27089,52,53248,,,,
+01/11/17-20:49:41.812579 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8755619,,0xFFF,64,0,50244,52,53248,,,,
+01/11/17-20:49:41.812584 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8756169,,0xFA5,64,0,6997,52,53248,,,,
+01/11/17-20:49:41.812586 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8756169,,0x1000,64,0,45003,52,53248,,,,
+01/11/17-20:49:41.812587 ,1,999158,0,"'snort test alert'",TCP,192.168.66.1,50184,192.168.66.121,8080,0A:00:27:00:00:00,08:00:27:E8:B0:7A,0x42,***A****,0x39818C40,0xA8756CB9,,0xFA5,64,0,18800,52,53248,,,,
+01/11/17-2
<TRUNCATED>
[2/5] incubator-metron git commit: METRON-659 Emulate Sensors in
Development Environments (nickwallen) closes apache/incubator-metron#417
Posted by ni...@apache.org.
http://git-wip-us.apache.org/repos/asf/incubator-metron/blob/d1fcda60/metron-deployment/roles/sensor-stubs/files/yaf.out
----------------------------------------------------------------------
diff --git a/metron-deployment/roles/sensor-stubs/files/yaf.out b/metron-deployment/roles/sensor-stubs/files/yaf.out
new file mode 100644
index 0000000..b7c4710
--- /dev/null
+++ b/metron-deployment/roles/sensor-stubs/files/yaf.out
@@ -0,0 +1,22164 @@
+2017-01-11 20:52:24.012|2017-01-11 20:52:24.012| 0.000| 0.000| 6| 192.168.138.158|49195| 188.165.164.184| 80| AR| 0| 0| 0|522c999d|00000000|000|000| 1| 40| 0| 0| 0|
+2017-01-11 20:52:24.008|2017-01-11 20:52:24.022| 0.014| 0.002| 6| 72.34.49.86| 80| 192.168.138.158|49204| AP| APF| AF| A|3e05e129|5869e531|000|000| 3| 358| 2| 80| 0|
+2017-01-11 20:52:36.640|2017-01-11 20:53:28.138| 51.498| 0.000| 6| 62.75.195.236| 80| 192.168.138.158|49186| AP| AP| AR| A|73734c1c|516c4a0c|000|000| 2| 82| 3| 120| 0|
+2017-01-11 20:52:52.845|2017-01-11 20:53:58.724| 65.879| 0.187| 6| 192.168.138.158|49208| 95.163.121.204| 80| S| APR| AS| AP|be149584|8ef40c65|000|000| 7| 1206| 6| 2873| 0|
+2017-01-11 20:52:52.845|2017-01-11 20:54:03.711| 70.866| 0.187| 6| 192.168.138.158|49207| 95.163.121.204| 80| S| APR| AS| AP|c031307b|d1fe0059|000|000| 7| 1088| 5| 1685| 0|
+2017-01-11 20:52:52.845|2017-01-11 20:54:08.699| 75.854| 0.201| 6| 192.168.138.158|49209| 95.163.121.204| 80| S| APR| AS| AP|32c0b55e|f31124b8|000|000| 8| 1502| 9| 6752| 0|
+2017-01-11 20:52:50.865|2017-01-11 20:54:08.699| 77.834| 0.173| 6| 192.168.138.158|49206| 95.163.121.204| 80| S| APR| AS| AP|a80daa6e|b93a04df|000|000| 10| 2265| 12| 7194| 0|
+2017-01-11 20:52:48.208|2017-01-11 20:54:08.700| 80.492| 0.172| 6| 192.168.138.158|49205| 95.163.121.204| 80| S| APR| AS| AP|ca8d81e2|0628e3a4|000|000| 11| 2097| 14| 9627| 0|
+2017-01-11 20:52:52.847|2017-01-11 20:54:08.700| 75.853| 0.185| 6| 192.168.138.158|49210| 95.163.121.204| 80| S| APR| AS| AP|63626a70|9b7a5687|000|000| 8| 1645| 7| 2238| 0|
+2017-01-11 20:54:08.935|2017-01-11 20:54:09.448| 0.513| 0.132| 6| 192.168.138.158|49184| 62.75.195.236| 80| S| APF| AS| APF|92a7a033|00b98442|000|000| 5| 805| 5| 966| 0|
+2017-01-11 20:54:09.637|2017-01-11 20:54:10.054| 0.417| 0.131| 6| 192.168.138.158|49185| 62.75.195.236| 80| S| APF| AS| APF|14dad2de|057d07a2|000|000| 6| 782| 10| 9600| 0|
+2017-01-11 20:54:10.747|2017-01-11 20:54:11.162| 0.415| 0.136| 6| 192.168.138.158|49188| 62.75.195.236| 80| S| APF| AS| APF|f017c491|abdb7ffd|000|000| 5| 283| 5| 1267| 0|
+2017-01-11 20:54:11.153|2017-01-11 20:54:12.135| 0.982| 0.135| 6| 192.168.138.158|49189| 62.75.195.236| 80| S| APF| AS| APF|9dfb17ed|f1bbe6ec|000|000| 80| 3525| 167| 229440| 0|
+2017-01-11 20:54:13.341|2017-01-11 20:54:13.628| 0.287| 0.131| 6| 192.168.138.158|49190| 62.75.195.236| 80| S| APF| AS| APF|abe3db05|2178457a|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:54:13.630|2017-01-11 20:54:13.941| 0.311| 0.153| 6| 192.168.138.158|49191| 62.75.195.236| 80| S| APF| AS| APF|6ac7f41d|1ecaba70|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:54:13.943|2017-01-11 20:54:14.480| 0.537| 0.155| 6| 192.168.138.158|49192| 62.75.195.236| 80| S| APF| AS| APF|d57e1fff|00b640f3|000|000| 5| 525| 5| 418| 0|
+2017-01-11 20:54:14.483|2017-01-11 20:54:14.793| 0.310| 0.149| 6| 192.168.138.158|49193| 62.75.195.236| 80| S| APF| AS| APF|1cff6791|0099d801|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:54:14.795|2017-01-11 20:54:15.093| 0.298| 0.140| 6| 192.168.138.158|49194| 62.75.195.236| 80| S| APF| AS| APF|d7003ea2|c8807b47|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:54:15.133|2017-01-11 20:54:15.334| 0.201| 0.042| 6| 192.168.138.158|49197| 204.152.254.221| 80| S| APF| AS| APF|58cf2c67|166f1d89|000|000| 7| 820| 6| 765| 0|
+2017-01-11 20:54:15.094|2017-01-11 20:54:15.388| 0.294| 0.138| 6| 192.168.138.158|49196| 62.75.195.236| 80| S| APF| AS| APF|bdd9bac5|546ac731|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:54:15.555|2017-01-11 20:54:17.711| 2.156| 0.051| 6| 192.168.138.158|49198| 72.34.49.86| 80| S| APF| AS| APF|24718a4a|e263a145|000|000| 7| 822| 7| 522| 0|
+2017-01-11 20:54:17.700|2017-01-11 20:54:17.886| 0.186| 0.059| 6| 192.168.138.158|49199| 204.152.254.221| 80| S| APF| AS| APF|86fa40fb|20de0881|000|000| 6| 741| 5| 725| 0|
+2017-01-11 20:54:17.889|2017-01-11 20:54:20.677| 2.788| 0.103| 6| 192.168.138.158|49200| 72.34.49.86| 80| S| APF| AS| APF|788e6fcc|271a3fd2|000|000| 6| 743| 6| 1466| 0|
+2017-01-11 20:54:20.666|2017-01-11 20:54:20.832| 0.166| 0.053| 6| 192.168.138.158|49201| 204.152.254.221| 80| S| APF| AS| APF|b74faf85|50818fd9|000|000| 7| 846| 6| 765| 0|
+2017-01-11 20:54:20.834|2017-01-11 20:54:24.431| 3.597| 0.106| 6| 192.168.138.158|49202| 72.34.49.86| 80| S| APF| AS| APF|78494ef3|0d188aea|000|000| 19| 1328| 39| 47453| 0|
+2017-01-11 20:54:27.057|2017-01-11 20:54:27.252| 0.195| 0.043| 6| 192.168.138.158|49203| 204.152.254.221| 80| S| APF| AS| APF|075be34c|00357320|000|000| 6| 754| 5| 725| 0|
+2017-01-11 20:54:14.819|2017-01-11 20:54:29.238| 14.419| 0.129| 6| 192.168.138.158|49195| 188.165.164.184| 80| S| APR| AS| AP|522c98b3|c88832bc|000|000| 5| 445| 3| 552| 0|
+2017-01-11 20:54:27.255|2017-01-11 20:54:29.248| 1.993| 0.105| 6| 192.168.138.158|49204| 72.34.49.86| 80| S| APF| AS| APF|5869e338|3e05e128|000|000| 6| 756| 6| 482| 0|
+2017-01-11 20:54:09.651|2017-01-11 20:55:33.365| 83.714| 0.131| 6| 192.168.138.158|49186| 62.75.195.236| 80| S| APR| AS| AP|516c475c|7371702c|000|000| 51| 2739| 100| 125851| 0|
+2017-01-11 20:54:58.071|2017-01-11 20:56:03.951| 65.880| 0.187| 6| 192.168.138.158|49208| 95.163.121.204| 80| S| APR| AS| AP|be149584|8ef40c65|000|000| 7| 1206| 6| 2873| 0|
+2017-01-11 20:54:58.070|2017-01-11 20:56:08.937| 70.867| 0.188| 6| 192.168.138.158|49207| 95.163.121.204| 80| S| APR| AS| AP|c031307b|d1fe0059|000|000| 7| 1088| 5| 1685| 0|
+2017-01-11 20:54:58.071|2017-01-11 20:56:13.926| 75.855| 0.201| 6| 192.168.138.158|49209| 95.163.121.204| 80| S| APR| AS| AP|32c0b55e|f31124b8|000|000| 8| 1502| 9| 6752| 0|
+2017-01-11 20:54:56.089|2017-01-11 20:56:13.926| 77.837| 0.174| 6| 192.168.138.158|49206| 95.163.121.204| 80| S| APR| AS| AP|a80daa6e|b93a04df|000|000| 10| 2265| 12| 7194| 0|
+2017-01-11 20:54:53.434|2017-01-11 20:56:13.926| 80.492| 0.173| 6| 192.168.138.158|49205| 95.163.121.204| 80| S| APR| AS| AP|ca8d81e2|0628e3a4|000|000| 11| 2097| 14| 9627| 0|
+2017-01-11 20:54:58.073|2017-01-11 20:56:13.926| 75.853| 0.185| 6| 192.168.138.158|49210| 95.163.121.204| 80| S| APR| AS| AP|63626a70|9b7a5687|000|000| 8| 1645| 7| 2238| 0|
+2017-01-11 20:56:14.161|2017-01-11 20:56:14.672| 0.511| 0.133| 6| 192.168.138.158|49184| 62.75.195.236| 80| S| APF| AS| APF|92a7a033|00b98442|000|000| 5| 805| 5| 966| 0|
+2017-01-11 20:56:14.861|2017-01-11 20:56:15.278| 0.417| 0.132| 6| 192.168.138.158|49185| 62.75.195.236| 80| S| APF| AS| APF|14dad2de|057d07a2|000|000| 6| 782| 10| 9600| 0|
+2017-01-11 20:56:15.960|2017-01-11 20:56:16.373| 0.413| 0.136| 6| 192.168.138.158|49188| 62.75.195.236| 80| S| APF| AS| APF|f017c491|abdb7ffd|000|000| 5| 283| 5| 1267| 0|
+2017-01-11 20:56:16.364|2017-01-11 20:56:17.370| 1.006| 0.135| 6| 192.168.138.158|49189| 62.75.195.236| 80| S| APF| AS| APF|9dfb17ed|f1bbe6ec|000|000| 80| 3525| 167| 229440| 0|
+2017-01-11 20:56:18.575|2017-01-11 20:56:18.864| 0.289| 0.131| 6| 192.168.138.158|49190| 62.75.195.236| 80| S| APF| AS| APF|abe3db05|2178457a|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:56:18.865|2017-01-11 20:56:19.176| 0.311| 0.153| 6| 192.168.138.158|49191| 62.75.195.236| 80| S| APF| AS| APF|6ac7f41d|1ecaba70|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:56:19.177|2017-01-11 20:56:19.712| 0.535| 0.154| 6| 192.168.138.158|49192| 62.75.195.236| 80| S| APF| AS| APF|d57e1fff|00b640f3|000|000| 5| 525| 5| 418| 0|
+2017-01-11 20:56:19.715|2017-01-11 20:56:20.025| 0.310| 0.150| 6| 192.168.138.158|49193| 62.75.195.236| 80| S| APF| AS| APF|1cff6791|0099d801|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:56:20.027|2017-01-11 20:56:20.325| 0.298| 0.140| 6| 192.168.138.158|49194| 62.75.195.236| 80| S| APF| AS| APF|d7003ea2|c8807b47|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:56:20.365|2017-01-11 20:56:20.567| 0.202| 0.042| 6| 192.168.138.158|49197| 204.152.254.221| 80| S| APF| AS| APF|58cf2c67|166f1d89|000|000| 7| 820| 6| 765| 0|
+2017-01-11 20:56:20.326|2017-01-11 20:56:20.620| 0.294| 0.139| 6| 192.168.138.158|49196| 62.75.195.236| 80| S| APF| AS| APF|bdd9bac5|546ac731|000|000| 5| 525| 4| 378| 0|
+2017-01-11 20:56:20.787|2017-01-11 20:56:22.941| 2.154| 0.051| 6| 192.168.138.158|49198| 72.34.49.86| 80| S| APF| AS| APF|24718a4a|e263a145|000|000| 7| 822| 7| 522| 0|
+2017-01-11 20:56:22.930|2017-01-11 20:56:23.114| 0.184| 0.059| 6| 192.168.138.158|49199| 204.152.254.221| 80| S| APF| AS| APF|86fa40fb|20de0881|000|000| 6| 741| 5| 725| 0|
+2017-01-11 20:56:23.118|2017-01-11 20:56:25.907| 2.789| 0.105| 6| 192.168.138.158|49200| 72.34.49.86| 80| S| APF| AS| APF|788e6fcc|271a3fd2|000|000| 6| 743| 6| 1466| 0|
+2017-01-11 20:56:25.896|2017-01-11 20:56:26.062| 0.166| 0.054| 6| 192.168.138.158|49201| 204.152.254.221| 80| S| APF| AS| APF|b74faf85|50818fd9|000|000| 7| 846| 6| 765| 0|
+2017-01-11 20:56:26.064|2017-01-11 20:56:29.665| 3.601| 0.106| 6| 192.168.138.158|49202| 72.34.49.86| 80| S| APF| AS| APF|78494ef3|0d188aea|000|000| 19| 1328| 39| 47453| 0|
+2017-01-11 20:56:32.291|2017-01-11 20:56:32.484| 0.193| 0.042| 6| 192.168.138.158|49203| 204.152.254.221| 80| S| APF| AS| APF|075be34c|00357320|000|000| 6| 754| 5| 725| 0|
+2017-01-11 20:56:20.052|2017-01-11 20:56:34.469| 14.417| 0.128| 6| 192.168.138.158|49195| 188.165.164.184| 80| S| APR| AS| AP|522c98b3|c88832bc|000|000| 5| 445| 3| 552| 0|
+2017-01-11 20:56:32.486|2017-01-11 20:56:34.479| 1.993| 0.105| 6| 192.168.138.158|49204| 72.34.49.86| 80| S| APF| AS| APF|5869e338|3e05e128|000|000| 6| 756| 6| 482| 0|
+2017-01-11 20:53:15.474|2017-01-11 20:56:10.859| 175.385| 0.000| 17| 192.168.66.1| 5353| 224.0.0.251| 5353| 0| 0| 0| 0|00000000|00000000|000|000| 12| 816| 0| 0| 0|eof
+2017-01-11 20:54:08.700|2017-01-11 20:56:14.077| 125.377| 0.151| 17| 192.168.138.158|60078| 192.168.138.2| 53| 0| 0| 0| 0|00000000|00000000|000|000| 2| 246| 2| 278| 0|eof
+2017-01-11 20:54:09.492|2017-01-11 20:56:14.861| 125.369| 0.144| 17| 192.168.138.158|65315| 192.168.138.2| 53| 0| 0| 0| 0|00000000|00000000|000|000| 2| 244| 2| 276| 0|eof
+2017-01-11 20:54:09.492|2017-01-11 20:56:14.875| 125.383| 0.158| 17| 192.168.138.158|50683| 192.168.138.2| 53| 0| 0| 0| 0|00000000|00000000|000|000| 2| 242| 2| 274| 0|eof
+2017-01-11 20:52:23.006|2017-01-11 20:56:17.746| 234.740| 0.022| 6| 192.168.66.1|50181| 192.168.66.121| 8080| AP| AP| AP| AP|89de8804|413104f3|000|000| 20| 6226| 14| 6653| 0|eof
+2017-01-11 20:54:14.677|2017-01-11 20:56:20.051| 125.374| 0.142| 17| 192.168.138.158|53571| 192.168.138.2| 53| 0| 0| 0| 0|00000000|00000000|000|000| 2| 112| 2| 144| 0|eof
+2017-01-11 20:54:15.095|2017-01-11 20:56:20.364| 125.269| 0.037| 17| 192.168.138.158|61720| 192.168.138.2| 53| 0| 0| 0| 0|00000000|00000000|000|000| 2| 112| 2| 144| 0|eof
+2017-01-11 20:54:15.336|2017-01-11 20:56:20.753| 125.417| 0.185| 17| 192.168.138.158|50509| 192.168.138.2| 53| 0| 0| 0| 0|00000000|00000000|000|000| 2| 150| 2| 262| 0|eof
+2017-01-11 20:54:15.522|2017-01-11 20:56:20.786| 125.264| 0.033| 17| 192.168.138.158|56753| 192.168.138.2| 53| 0| 0| 0| 0|00000000|00000000|000|000| 2| 128| 2| 160| 0|eof
+2017-01-11 20:52:23.007|2017-01-11 20:56:24.203| 241.196| 0.039| 6| 192.168.66.1|50186| 192.168.66.121| 8080| AP| AP| AP| AP|e6b20f8c|79c1af21|000|000| 75| 34066| 56| 30255| 0|eof
+2017-01-11 20:56:14.875|2017-01-11 20:56:47.098| 32.223| 0.131| 6| 192.168.138.158|49186| 62.75.195.236| 80| S| AP| AS| AP|516c475c|7371702c|000|000| 49| 2659| 99| 125810| 0|eof
+2017-01-11 20:52:23.007|2017-01-11 20:56:52.666| 269.659| 0.011| 6| 192.168.66.1|50187| 192.168.66.121| 8080| AP| AP| AP| AP|7b810bc7|f502ff81|000|000| 76| 28692| 56| 30587| 0|eof
+2017-01-11 20:52:23.005|2017-01-11 20:56:52.686| 269.681| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| AP| AP| AP|e53b601f|185bd4f0|000|000| 96| 38685| 70| 39312| 0|eof
+2017-01-11 20:52:23.007|2017-01-11 20:56:53.683| 270.676| 0.040| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| AP| AP| AP|3982f0c2|a885b507|000|000| 235| 95979| 174| 101932| 0|eof
+2017-01-11 20:52:23.006|2017-01-11 20:56:56.041| 273.035| 0.008| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| AP| AP| AP|83665d75|8df32014|000|000| 332| 146689| 257| 146440| 0|eof
+2017-01-11 20:52:48.175|2017-01-11 20:56:58.664| 250.489| 0.032| 17| 192.168.138.158|50329| 192.168.138.2| 53| 0| 0| 0| 0|00000000|00000000|000|000| 3| 231| 3| 279| 0|eof
+2017-01-11 20:56:58.838|2017-01-11 20:56:58.838| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AS| 0| 0| 0|0628e3a4|00000000|000|000| 1| 44| 0| 0| 0|idle
+2017-01-11 20:56:58.839|2017-01-11 20:56:58.839| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| A| 0| 0| 0|ca8d81e3|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:56:58.840|2017-01-11 20:56:58.840| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| AP| 0| 0| 0|ca8d81e3|00000000|000|000| 1| 369| 0| 0| 0|idle
+2017-01-11 20:56:58.840|2017-01-11 20:56:58.840| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| A| 0| 0| 0|0628e3a5|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:56:59.992|2017-01-11 20:56:59.992| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83685706|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:56:59.992|2017-01-11 20:56:59.992| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|83685cae|00000000|000|000| 1| 908| 0| 0| 0|idle
+2017-01-11 20:56:59.992|2017-01-11 20:56:59.992| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df527e8|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:56:59.993|2017-01-11 20:56:59.993| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| 0| 0| 0|398437fd|00000000|000|000| 1| 864| 0| 0| 0|idle
+2017-01-11 20:56:59.993|2017-01-11 20:56:59.993| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53be3e0|00000000|000|000| 1| 580| 0| 0| 0|idle
+2017-01-11 20:56:59.993|2017-01-11 20:56:59.993| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c6048|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:56:59.993|2017-01-11 20:56:59.993| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| AP| 0| 0| 0|7b816c8f|00000000|000|000| 1| 629| 0| 0| 0|idle
+2017-01-11 20:56:59.993|2017-01-11 20:56:59.993| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50187| A| 0| 0| 0|f5036b9c|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:56:59.995|2017-01-11 20:56:59.995| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c6048|00000000|000|000| 1| 302| 0| 0| 0|idle
+2017-01-11 20:56:59.995|2017-01-11 20:56:59.995| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53be5f0|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:00.010|2017-01-11 20:57:00.010| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50187| AP| 0| 0| 0|f5036b9c|00000000|000|000| 1| 1032| 0| 0| 0|idle
+2017-01-11 20:57:00.010|2017-01-11 20:57:00.010| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| A| 0| 0| 0|7b816ed0|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:00.032|2017-01-11 20:57:00.032| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| A| 0| 0| 0|a8871fdb|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:00.069|2017-01-11 20:57:00.069| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df527e8|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:00.069|2017-01-11 20:57:00.069| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df52d90|00000000|000|000| 1| 189| 0| 0| 0|idle
+2017-01-11 20:57:00.069|2017-01-11 20:57:00.069| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83686006|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:00.095|2017-01-11 20:57:00.095| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| AP| 0| 0| 0|a8871fdb|00000000|000|000| 1| 1067| 0| 0| 0|idle
+2017-01-11 20:57:00.095|2017-01-11 20:57:00.095| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|39843b29|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:01.317|2017-01-11 20:57:01.317| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AP| 0| 0| 0|0628e3a5|00000000|000|000| 1| 1395| 0| 0| 0|idle
+2017-01-11 20:57:01.322|2017-01-11 20:57:01.322| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| S| 0| 0| 0|a80daa6e|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:01.322|2017-01-11 20:57:01.322| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AP| 0| 0| 0|0628e8f0|00000000|000|000| 1| 393| 0| 0| 0|idle
+2017-01-11 20:57:01.323|2017-01-11 20:57:01.323| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| A| 0| 0| 0|ca8d832c|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:01.495|2017-01-11 20:57:01.495| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| AS| 0| 0| 0|b93a04df|00000000|000|000| 1| 44| 0| 0| 0|idle
+2017-01-11 20:57:01.495|2017-01-11 20:57:01.495| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| A| 0| 0| 0|a80daa6f|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:01.496|2017-01-11 20:57:01.496| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| AP| 0| 0| 0|a80daa6f|00000000|000|000| 1| 478| 0| 0| 0|idle
+2017-01-11 20:57:01.496|2017-01-11 20:57:01.496| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| A| 0| 0| 0|b93a04e0|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:01.942|2017-01-11 20:57:01.942| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| 0| 0| 0|39843b29|00000000|000|000| 1| 504| 0| 0| 0|idle
+2017-01-11 20:57:01.942|2017-01-11 20:57:01.942| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| A| 0| 0| 0|a88723d2|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:01.943|2017-01-11 20:57:01.943| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|83686006|00000000|000|000| 1| 628| 0| 0| 0|idle
+2017-01-11 20:57:01.943|2017-01-11 20:57:01.943| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| AP| 0| 0| 0|7b816ed0|00000000|000|000| 1| 678| 0| 0| 0|idle
+2017-01-11 20:57:01.948|2017-01-11 20:57:01.948| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df52e19|00000000|000|000| 1| 502| 0| 0| 0|idle
+2017-01-11 20:57:01.948|2017-01-11 20:57:01.948| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83686246|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:01.950|2017-01-11 20:57:01.950| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50187| AP| 0| 0| 0|f5036f70|00000000|000|000| 1| 544| 0| 0| 0|idle
+2017-01-11 20:57:01.950|2017-01-11 20:57:01.950| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| A| 0| 0| 0|7b817142|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:01.959|2017-01-11 20:57:01.959| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| A| 0| 0| 0|a88723d2|00000000|000|000| 1| 2948| 0| 0| 0|idle
+2017-01-11 20:57:01.959|2017-01-11 20:57:01.959| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| AP| 0| 0| 0|a8872f22|00000000|000|000| 1| 151| 0| 0| 0|idle
+2017-01-11 20:57:01.959|2017-01-11 20:57:01.959| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|39843ced|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:01.959|2017-01-11 20:57:01.959| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|39843ced|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:01.990|2017-01-11 20:57:01.990| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|39843ced|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:03.212|2017-01-11 20:57:03.212| 0.000| 0.000| 6| 192.168.66.1|50181| 192.168.66.121| 8080| A| 0| 0| 0|89de9c75|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.212|2017-01-11 20:57:03.212| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50181| A| 0| 0| 0|41311c18|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:03.281|2017-01-11 20:57:03.281| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| AP| 0| 0| 0|b93a04e0|00000000|000|000| 1| 1395| 0| 0| 0|idle
+2017-01-11 20:57:03.295|2017-01-11 20:57:03.295| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| AP| 0| 0| 0|b93a0a2b|00000000|000|000| 1| 1395| 0| 0| 0|idle
+2017-01-11 20:57:03.295|2017-01-11 20:57:03.295| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| A| 0| 0| 0|b93a0f76|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:03.295|2017-01-11 20:57:03.295| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| AP| 0| 0| 0|b93a152a|00000000|000|000| 1| 636| 0| 0| 0|idle
+2017-01-11 20:57:03.296|2017-01-11 20:57:03.296| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| A| 0| 0| 0|a80dac25|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.301|2017-01-11 20:57:03.301| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| AP| 0| 0| 0|ca8d832c|00000000|000|000| 1| 481| 0| 0| 0|idle
+2017-01-11 20:57:03.301|2017-01-11 20:57:03.301| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| A| 0| 0| 0|0628ea51|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.301|2017-01-11 20:57:03.301| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| AP| 0| 0| 0|a80dac25|00000000|000|000| 1| 481| 0| 0| 0|idle
+2017-01-11 20:57:03.301|2017-01-11 20:57:03.301| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| A| 0| 0| 0|b93a177e|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.302|2017-01-11 20:57:03.302| 0.000| 0.000| 6| 192.168.138.158|49207| 95.163.121.204| 80| S| 0| 0| 0|c031307b|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:03.302|2017-01-11 20:57:03.302| 0.000| 0.000| 6| 192.168.138.158|49208| 95.163.121.204| 80| S| 0| 0| 0|be149584|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:03.302|2017-01-11 20:57:03.302| 0.000| 0.000| 6| 192.168.138.158|49209| 95.163.121.204| 80| S| 0| 0| 0|32c0b55e|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:03.304|2017-01-11 20:57:03.304| 0.000| 0.000| 6| 192.168.138.158|49210| 95.163.121.204| 80| S| 0| 0| 0|63626a70|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:03.489|2017-01-11 20:57:03.489| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49208| AS| 0| 0| 0|8ef40c65|00000000|000|000| 1| 44| 0| 0| 0|idle
+2017-01-11 20:57:03.489|2017-01-11 20:57:03.489| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49207| AS| 0| 0| 0|d1fe0059|00000000|000|000| 1| 44| 0| 0| 0|idle
+2017-01-11 20:57:03.489|2017-01-11 20:57:03.489| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49210| AS| 0| 0| 0|9b7a5687|00000000|000|000| 1| 44| 0| 0| 0|idle
+2017-01-11 20:57:03.490|2017-01-11 20:57:03.490| 0.000| 0.000| 6| 192.168.138.158|49208| 95.163.121.204| 80| A| 0| 0| 0|be149585|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.490|2017-01-11 20:57:03.490| 0.000| 0.000| 6| 192.168.138.158|49207| 95.163.121.204| 80| A| 0| 0| 0|c031307c|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.490|2017-01-11 20:57:03.490| 0.000| 0.000| 6| 192.168.138.158|49210| 95.163.121.204| 80| A| 0| 0| 0|63626a71|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.490|2017-01-11 20:57:03.490| 0.000| 0.000| 6| 192.168.138.158|49208| 95.163.121.204| 80| AP| 0| 0| 0|be149585|00000000|000|000| 1| 519| 0| 0| 0|idle
+2017-01-11 20:57:03.490|2017-01-11 20:57:03.490| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49208| A| 0| 0| 0|8ef40c66|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.490|2017-01-11 20:57:03.490| 0.000| 0.000| 6| 192.168.138.158|49207| 95.163.121.204| 80| AP| 0| 0| 0|c031307c|00000000|000|000| 1| 481| 0| 0| 0|idle
+2017-01-11 20:57:03.490|2017-01-11 20:57:03.490| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49207| A| 0| 0| 0|d1fe005a|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.490|2017-01-11 20:57:03.490| 0.000| 0.000| 6| 192.168.138.158|49210| 95.163.121.204| 80| AP| 0| 0| 0|63626a71|00000000|000|000| 1| 475| 0| 0| 0|idle
+2017-01-11 20:57:03.491|2017-01-11 20:57:03.491| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49210| A| 0| 0| 0|9b7a5688|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.503|2017-01-11 20:57:03.503| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| AS| 0| 0| 0|f31124b8|00000000|000|000| 1| 44| 0| 0| 0|idle
+2017-01-11 20:57:03.503|2017-01-11 20:57:03.503| 0.000| 0.000| 6| 192.168.138.158|49209| 95.163.121.204| 80| A| 0| 0| 0|32c0b55f|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:03.506|2017-01-11 20:57:03.506| 0.000| 0.000| 6| 192.168.138.158|49209| 95.163.121.204| 80| AP| 0| 0| 0|32c0b55f|00000000|000|000| 1| 481| 0| 0| 0|idle
+2017-01-11 20:57:03.506|2017-01-11 20:57:03.506| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| A| 0| 0| 0|f31124b9|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:05.068|2017-01-11 20:57:05.068| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| AP| 0| 0| 0|b93a177e|00000000|000|000| 1| 856| 0| 0| 0|idle
+2017-01-11 20:57:05.070|2017-01-11 20:57:05.070| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| AP| 0| 0| 0|a80dadde|00000000|000|000| 1| 481| 0| 0| 0|idle
+2017-01-11 20:57:05.071|2017-01-11 20:57:05.071| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| A| 0| 0| 0|b93a1aae|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:05.283|2017-01-11 20:57:05.283| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AP| 0| 0| 0|0628ea51|00000000|000|000| 1| 1129| 0| 0| 0|idle
+2017-01-11 20:57:05.286|2017-01-11 20:57:05.286| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| AP| 0| 0| 0|ca8d84e5|00000000|000|000| 1| 475| 0| 0| 0|idle
+2017-01-11 20:57:05.286|2017-01-11 20:57:05.286| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| A| 0| 0| 0|0628ee92|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:05.319|2017-01-11 20:57:05.319| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49210| AP| 0| 0| 0|9b7a5688|00000000|000|000| 1| 529| 0| 0| 0|idle
+2017-01-11 20:57:05.321|2017-01-11 20:57:05.321| 0.000| 0.000| 6| 192.168.138.158|49210| 95.163.121.204| 80| AP| 0| 0| 0|63626c24|00000000|000|000| 1| 475| 0| 0| 0|idle
+2017-01-11 20:57:05.322|2017-01-11 20:57:05.322| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49210| A| 0| 0| 0|9b7a5871|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:05.403|2017-01-11 20:57:05.403| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49208| AP| 0| 0| 0|8ef40c66|00000000|000|000| 1| 1395| 0| 0| 0|idle
+2017-01-11 20:57:05.418|2017-01-11 20:57:05.418| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49208| AP| 0| 0| 0|8ef411b1|00000000|000|000| 1| 828| 0| 0| 0|idle
+2017-01-11 20:57:05.418|2017-01-11 20:57:05.418| 0.000| 0.000| 6| 192.168.138.158|49208| 95.163.121.204| 80| A| 0| 0| 0|be149764|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:05.419|2017-01-11 20:57:05.419| 0.000| 0.000| 6| 192.168.138.158|49208| 95.163.121.204| 80| AP| 0| 0| 0|be149764|00000000|000|000| 1| 475| 0| 0| 0|idle
+2017-01-11 20:57:05.419|2017-01-11 20:57:05.419| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49208| A| 0| 0| 0|8ef414c5|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:05.557|2017-01-11 20:57:05.557| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49207| AP| 0| 0| 0|d1fe005a|00000000|000|000| 1| 938| 0| 0| 0|idle
+2017-01-11 20:57:05.658|2017-01-11 20:57:05.658| 0.000| 0.000| 6| 192.168.138.158|49207| 95.163.121.204| 80| A| 0| 0| 0|c0313235|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:05.682|2017-01-11 20:57:05.682| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| AP| 0| 0| 0|f31124b9|00000000|000|000| 1| 838| 0| 0| 0|idle
+2017-01-11 20:57:05.785|2017-01-11 20:57:05.785| 0.000| 0.000| 6| 192.168.138.158|49209| 95.163.121.204| 80| A| 0| 0| 0|32c0b718|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:07.100|2017-01-11 20:57:07.100| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| 0| 0| 0|39843ced|00000000|000|000| 1| 580| 0| 0| 0|idle
+2017-01-11 20:57:07.100|2017-01-11 20:57:07.100| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| AP| 0| 0| 0|7b817142|00000000|000|000| 1| 629| 0| 0| 0|idle
+2017-01-11 20:57:07.101|2017-01-11 20:57:07.101| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83686246|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:07.101|2017-01-11 20:57:07.101| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|836867ee|00000000|000|000| 1| 908| 0| 0| 0|idle
+2017-01-11 20:57:07.101|2017-01-11 20:57:07.101| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53be5f0|00000000|000|000| 1| 864| 0| 0| 0|idle
+2017-01-11 20:57:07.101|2017-01-11 20:57:07.101| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| AP| 0| 0| 0|a8872f85|00000000|000|000| 1| 302| 0| 0| 0|idle
+2017-01-11 20:57:07.102|2017-01-11 20:57:07.102| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|39843efd|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:07.102|2017-01-11 20:57:07.102| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df52fdb|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:07.111|2017-01-11 20:57:07.111| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50187| AP| 0| 0| 0|f503715c|00000000|000|000| 1| 1033| 0| 0| 0|idle
+2017-01-11 20:57:07.111|2017-01-11 20:57:07.111| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| A| 0| 0| 0|7b817383|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:07.142|2017-01-11 20:57:07.142| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c6142|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:07.173|2017-01-11 20:57:07.173| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| AP| 0| 0| 0|b93a1aae|00000000|000|000| 1| 998| 0| 0| 0|idle
+2017-01-11 20:57:07.219|2017-01-11 20:57:07.219| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df52fdb|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:07.219|2017-01-11 20:57:07.219| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df53583|00000000|000|000| 1| 189| 0| 0| 0|idle
+2017-01-11 20:57:07.219|2017-01-11 20:57:07.219| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83686b46|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:07.234|2017-01-11 20:57:07.234| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c6142|00000000|000|000| 1| 1067| 0| 0| 0|idle
+2017-01-11 20:57:07.234|2017-01-11 20:57:07.234| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53be91c|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:07.277|2017-01-11 20:57:07.277| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| A| 0| 0| 0|a80daf97|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:07.345|2017-01-11 20:57:07.345| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AP| 0| 0| 0|0628ee92|00000000|000|000| 1| 531| 0| 0| 0|idle
+2017-01-11 20:57:07.416|2017-01-11 20:57:07.416| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49210| AP| 0| 0| 0|9b7a5871|00000000|000|000| 1| 528| 0| 0| 0|idle
+2017-01-11 20:57:07.445|2017-01-11 20:57:07.445| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| A| 0| 0| 0|ca8d8698|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:07.519|2017-01-11 20:57:07.519| 0.000| 0.000| 6| 192.168.138.158|49210| 95.163.121.204| 80| A| 0| 0| 0|63626dd7|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:07.538|2017-01-11 20:57:07.538| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49208| AP| 0| 0| 0|8ef414c5|00000000|000|000| 1| 526| 0| 0| 0|idle
+2017-01-11 20:57:07.551|2017-01-11 20:57:07.551| 0.000| 0.000| 6| 192.168.138.158|49207| 95.163.121.204| 80| AP| 0| 0| 0|c0313235|00000000|000|000| 1| 395| 0| 0| 0|idle
+2017-01-11 20:57:07.551|2017-01-11 20:57:07.551| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49207| A| 0| 0| 0|d1fe03dc|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:07.639|2017-01-11 20:57:07.639| 0.000| 0.000| 6| 192.168.138.158|49208| 95.163.121.204| 80| A| 0| 0| 0|be149917|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:09.043|2017-01-11 20:57:09.043| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53be91c|00000000|000|000| 1| 836| 0| 0| 0|idle
+2017-01-11 20:57:09.043|2017-01-11 20:57:09.043| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c6539|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:09.043|2017-01-11 20:57:09.043| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|83686b46|00000000|000|000| 1| 608| 0| 0| 0|idle
+2017-01-11 20:57:09.080|2017-01-11 20:57:09.080| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c6539|00000000|000|000| 1| 317| 0| 0| 0|idle
+2017-01-11 20:57:09.081|2017-01-11 20:57:09.081| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bec2c|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:09.083|2017-01-11 20:57:09.083| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df5360c|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:09.085|2017-01-11 20:57:09.085| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df5360c|00000000|000|000| 1| 671| 0| 0| 0|idle
+2017-01-11 20:57:09.085|2017-01-11 20:57:09.085| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83686d72|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:09.525|2017-01-11 20:57:09.525| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49207| AP| 0| 0| 0|d1fe03dc|00000000|000|000| 1| 623| 0| 0| 0|idle
+2017-01-11 20:57:09.628|2017-01-11 20:57:09.628| 0.000| 0.000| 6| 192.168.138.158|49207| 95.163.121.204| 80| A| 0| 0| 0|c0313398|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:09.697|2017-01-11 20:57:09.697| 0.000| 0.000| 6| 192.168.66.1|50186| 192.168.66.121| 8080| A| 0| 0| 0|e6b28585|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:09.697|2017-01-11 20:57:09.697| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50186| A| 0| 0| 0|79c219f0|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:12.491|2017-01-11 20:57:12.491| 0.000| 0.000| 6| 192.168.138.158|49209| 95.163.121.204| 80| AP| 0| 0| 0|32c0b718|00000000|000|000| 1| 769| 0| 0| 0|idle
+2017-01-11 20:57:12.492|2017-01-11 20:57:12.492| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| A| 0| 0| 0|f31127d7|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:12.639|2017-01-11 20:57:12.639| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|83686d72|00000000|000|000| 1| 628| 0| 0| 0|idle
+2017-01-11 20:57:12.639|2017-01-11 20:57:12.639| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df53877|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:12.640|2017-01-11 20:57:12.640| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53bec2c|00000000|000|000| 1| 678| 0| 0| 0|idle
+2017-01-11 20:57:12.644|2017-01-11 20:57:12.644| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df53877|00000000|000|000| 1| 501| 0| 0| 0|idle
+2017-01-11 20:57:12.644|2017-01-11 20:57:12.644| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83686fb2|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:12.650|2017-01-11 20:57:12.650| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c6642|00000000|000|000| 1| 544| 0| 0| 0|idle
+2017-01-11 20:57:12.650|2017-01-11 20:57:12.650| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bee9e|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:13.638|2017-01-11 20:57:13.638| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bee9e|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:13.638|2017-01-11 20:57:13.638| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53bf446|00000000|000|000| 1| 136| 0| 0| 0|idle
+2017-01-11 20:57:13.638|2017-01-11 20:57:13.638| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c682e|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:13.638|2017-01-11 20:57:13.638| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|83686fb2|00000000|000|000| 1| 504| 0| 0| 0|idle
+2017-01-11 20:57:13.638|2017-01-11 20:57:13.638| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| AP| 0| 0| 0|7b817383|00000000|000|000| 1| 580| 0| 0| 0|idle
+2017-01-11 20:57:13.639|2017-01-11 20:57:13.639| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| 0| 0| 0|39843efd|00000000|000|000| 1| 629| 0| 0| 0|idle
+2017-01-11 20:57:13.640|2017-01-11 20:57:13.640| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50187| AP| 0| 0| 0|f5037531|00000000|000|000| 1| 302| 0| 0| 0|idle
+2017-01-11 20:57:13.640|2017-01-11 20:57:13.640| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| A| 0| 0| 0|7b817593|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:13.642|2017-01-11 20:57:13.642| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c682e|00000000|000|000| 1| 678| 0| 0| 0|idle
+2017-01-11 20:57:13.642|2017-01-11 20:57:13.642| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bf49a|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:13.646|2017-01-11 20:57:13.646| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| AP| 0| 0| 0|a887307f|00000000|000|000| 1| 1032| 0| 0| 0|idle
+2017-01-11 20:57:13.647|2017-01-11 20:57:13.647| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|3984413e|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:13.657|2017-01-11 20:57:13.657| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df53a38|00000000|000|000| 1| 2948| 0| 0| 0|idle
+2017-01-11 20:57:13.657|2017-01-11 20:57:13.657| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83687176|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:13.657|2017-01-11 20:57:13.657| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df54588|00000000|000|000| 1| 150| 0| 0| 0|idle
+2017-01-11 20:57:13.658|2017-01-11 20:57:13.658| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83687176|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:13.686|2017-01-11 20:57:13.686| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83687176|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:14.652|2017-01-11 20:57:14.652| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83687176|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:14.652|2017-01-11 20:57:14.652| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|8368771e|00000000|000|000| 1| 908| 0| 0| 0|idle
+2017-01-11 20:57:14.652|2017-01-11 20:57:14.652| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df545ea|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:14.653|2017-01-11 20:57:14.653| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| 0| 0| 0|3984413e|00000000|000|000| 1| 864| 0| 0| 0|idle
+2017-01-11 20:57:14.693|2017-01-11 20:57:14.693| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| A| 0| 0| 0|a8873453|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:14.719|2017-01-11 20:57:14.719| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df545ea|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:14.719|2017-01-11 20:57:14.719| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df54b92|00000000|000|000| 1| 187| 0| 0| 0|idle
+2017-01-11 20:57:14.719|2017-01-11 20:57:14.719| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83687a76|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:14.743|2017-01-11 20:57:14.743| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| AP| 0| 0| 0|a8873453|00000000|000|000| 1| 1067| 0| 0| 0|idle
+2017-01-11 20:57:14.743|2017-01-11 20:57:14.743| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|3984446a|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:15.201|2017-01-11 20:57:15.201| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| AP| 0| 0| 0|f31127d7|00000000|000|000| 1| 1395| 0| 0| 0|idle
+2017-01-11 20:57:15.215|2017-01-11 20:57:15.215| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| AP| 0| 0| 0|f3112d22|00000000|000|000| 1| 1395| 0| 0| 0|idle
+2017-01-11 20:57:15.215|2017-01-11 20:57:15.215| 0.000| 0.000| 6| 192.168.138.158|49209| 95.163.121.204| 80| A| 0| 0| 0|32c0b9f1|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:15.215|2017-01-11 20:57:15.215| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| A| 0| 0| 0|f311326d|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:15.215|2017-01-11 20:57:15.215| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| AP| 0| 0| 0|f3113821|00000000|000|000| 1| 1290| 0| 0| 0|idle
+2017-01-11 20:57:15.215|2017-01-11 20:57:15.215| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49209| AP| 0| 0| 0|f3113d03|00000000|000|000| 1| 210| 0| 0| 0|idle
+2017-01-11 20:57:15.216|2017-01-11 20:57:15.216| 0.000| 0.000| 6| 192.168.138.158|49209| 95.163.121.204| 80| A| 0| 0| 0|32c0b9f1|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:15.228|2017-01-11 20:57:15.228| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| AP| 0| 0| 0|a80daf97|00000000|000|000| 1| 573| 0| 0| 0|idle
+2017-01-11 20:57:15.228|2017-01-11 20:57:15.228| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| A| 0| 0| 0|b93a1e6c|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:17.326|2017-01-11 20:57:17.326| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49206| AP| 0| 0| 0|b93a1e6c|00000000|000|000| 1| 210| 0| 0| 0|idle
+2017-01-11 20:57:17.334|2017-01-11 20:57:17.334| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| AP| 0| 0| 0|ca8d8698|00000000|000|000| 1| 480| 0| 0| 0|idle
+2017-01-11 20:57:17.335|2017-01-11 20:57:17.335| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| A| 0| 0| 0|0628f07d|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:17.335|2017-01-11 20:57:17.335| 0.000| 0.000| 6| 192.168.138.158|49210| 95.163.121.204| 80| AP| 0| 0| 0|63626dd7|00000000|000|000| 1| 483| 0| 0| 0|idle
+2017-01-11 20:57:17.335|2017-01-11 20:57:17.335| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49210| A| 0| 0| 0|9b7a5a59|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:17.429|2017-01-11 20:57:17.429| 0.000| 0.000| 6| 192.168.138.158|49206| 95.163.121.204| 80| A| 0| 0| 0|a80db1ac|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:18.962|2017-01-11 20:57:18.962| 0.000| 0.000| 6| 62.75.195.236| 80| 192.168.138.158|49186| AP| 0| 0| 0|73734c1c|00000000|000|000| 1| 41| 0| 0| 0|idle
+2017-01-11 20:57:18.963|2017-01-11 20:57:18.963| 0.000| 0.000| 6| 192.168.138.158|49186| 62.75.195.236| 80| A| 0| 0| 0|516c4a0c|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:19.150|2017-01-11 20:57:19.150| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AP| 0| 0| 0|0628f07d|00000000|000|000| 1| 1395| 0| 0| 0|idle
+2017-01-11 20:57:19.172|2017-01-11 20:57:19.172| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| A| 0| 0| 0|0628f5c8|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:19.172|2017-01-11 20:57:19.172| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AP| 0| 0| 0|0628fb7c|00000000|000|000| 1| 1326| 0| 0| 0|idle
+2017-01-11 20:57:19.172|2017-01-11 20:57:19.172| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| A| 0| 0| 0|ca8d8850|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:19.346|2017-01-11 20:57:19.346| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AP| 0| 0| 0|06290082|00000000|000|000| 1| 1395| 0| 0| 0|idle
+2017-01-11 20:57:19.360|2017-01-11 20:57:19.360| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49205| AP| 0| 0| 0|062905cd|00000000|000|000| 1| 359| 0| 0| 0|idle
+2017-01-11 20:57:19.360|2017-01-11 20:57:19.360| 0.000| 0.000| 6| 192.168.138.158|49205| 95.163.121.204| 80| A| 0| 0| 0|ca8d8850|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:19.407|2017-01-11 20:57:19.407| 0.000| 0.000| 6| 95.163.121.204| 80| 192.168.138.158|49210| AP| 0| 0| 0|9b7a5a59|00000000|000|000| 1| 1017| 0| 0| 0|idle
+2017-01-11 20:57:19.512|2017-01-11 20:57:19.512| 0.000| 0.000| 6| 192.168.138.158|49210| 95.163.121.204| 80| A| 0| 0| 0|63626f92|00000000|000|000| 1| 40| 0| 0| 0|idle
+2017-01-11 20:57:19.984|2017-01-11 20:57:19.984| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| 0| 0| 0|3984446a|00000000|000|000| 1| 580| 0| 0| 0|idle
+2017-01-11 20:57:19.984|2017-01-11 20:57:19.984| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| A| 0| 0| 0|a887384a|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:19.985|2017-01-11 20:57:19.985| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|83687a76|00000000|000|000| 1| 629| 0| 0| 0|idle
+2017-01-11 20:57:19.985|2017-01-11 20:57:19.985| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| AP| 0| 0| 0|a887384a|00000000|000|000| 1| 302| 0| 0| 0|idle
+2017-01-11 20:57:19.985|2017-01-11 20:57:19.985| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|3984467a|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:19.993|2017-01-11 20:57:19.993| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df54c19|00000000|000|000| 1| 1032| 0| 0| 0|idle
+2017-01-11 20:57:19.993|2017-01-11 20:57:19.993| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83687cb7|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:22.917|2017-01-11 20:57:22.917| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83687cb7|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:22.917|2017-01-11 20:57:22.917| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|8368825f|00000000|000|000| 1| 908| 0| 0| 0|idle
+2017-01-11 20:57:22.917|2017-01-11 20:57:22.917| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df54fed|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:22.918|2017-01-11 20:57:22.918| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| 0| 0| 0|3984467a|00000000|000|000| 1| 864| 0| 0| 0|idle
+2017-01-11 20:57:22.918|2017-01-11 20:57:22.918| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53bf49a|00000000|000|000| 1| 628| 0| 0| 0|idle
+2017-01-11 20:57:22.918|2017-01-11 20:57:22.918| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| AP| 0| 0| 0|7b817593|00000000|000|000| 1| 678| 0| 0| 0|idle
+2017-01-11 20:57:22.924|2017-01-11 20:57:22.924| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50187| AP| 0| 0| 0|f503762b|00000000|000|000| 1| 544| 0| 0| 0|idle
+2017-01-11 20:57:22.924|2017-01-11 20:57:22.924| 0.000| 0.000| 6| 192.168.66.1|50187| 192.168.66.121| 8080| A| 0| 0| 0|7b817805|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:22.926|2017-01-11 20:57:22.926| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c6aa0|00000000|000|000| 1| 501| 0| 0| 0|idle
+2017-01-11 20:57:22.926|2017-01-11 20:57:22.926| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bf6da|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:22.957|2017-01-11 20:57:22.957| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| A| 0| 0| 0|a8873944|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:22.983|2017-01-11 20:57:22.983| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df54fed|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:22.983|2017-01-11 20:57:22.983| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df55595|00000000|000|000| 1| 186| 0| 0| 0|idle
+2017-01-11 20:57:22.983|2017-01-11 20:57:22.983| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|836885b7|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:23.002|2017-01-11 20:57:23.002| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| AP| 0| 0| 0|a8873944|00000000|000|000| 1| 1067| 0| 0| 0|idle
+2017-01-11 20:57:23.003|2017-01-11 20:57:23.003| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|398449a6|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:25.618|2017-01-11 20:57:25.618| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| AP| 0| 0| 0|398449a6|00000000|000|000| 1| 504| 0| 0| 0|idle
+2017-01-11 20:57:25.618|2017-01-11 20:57:25.618| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| A| 0| 0| 0|a8873d3b|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:25.619|2017-01-11 20:57:25.619| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|836885b7|00000000|000|000| 1| 836| 0| 0| 0|idle
+2017-01-11 20:57:25.619|2017-01-11 20:57:25.619| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53bf6da|00000000|000|000| 1| 608| 0| 0| 0|idle
+2017-01-11 20:57:25.633|2017-01-11 20:57:25.633| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| A| 0| 0| 0|a8873d3b|00000000|000|000| 1| 2948| 0| 0| 0|idle
+2017-01-11 20:57:25.633|2017-01-11 20:57:25.633| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50184| AP| 0| 0| 0|a887488b|00000000|000|000| 1| 151| 0| 0| 0|idle
+2017-01-11 20:57:25.633|2017-01-11 20:57:25.633| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|39844b6a|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:25.633|2017-01-11 20:57:25.633| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|39844b6a|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:25.633|2017-01-11 20:57:25.633| 0.000| 0.000| 6| 192.168.66.1|50184| 192.168.66.121| 8080| A| 0| 0| 0|39844b6a|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:25.658|2017-01-11 20:57:25.658| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df5561b|00000000|000|000| 1| 317| 0| 0| 0|idle
+2017-01-11 20:57:25.658|2017-01-11 20:57:25.658| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|836888c7|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:25.658|2017-01-11 20:57:25.658| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c6c61|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:25.659|2017-01-11 20:57:25.659| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c6c61|00000000|000|000| 1| 671| 0| 0| 0|idle
+2017-01-11 20:57:25.660|2017-01-11 20:57:25.660| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bf906|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:26.665|2017-01-11 20:57:26.665| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53bf906|00000000|000|000| 1| 580| 0| 0| 0|idle
+2017-01-11 20:57:26.665|2017-01-11 20:57:26.665| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c6ecc|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:26.665|2017-01-11 20:57:26.665| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|836888c7|00000000|000|000| 1| 629| 0| 0| 0|idle
+2017-01-11 20:57:26.666|2017-01-11 20:57:26.666| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c6ecc|00000000|000|000| 1| 302| 0| 0| 0|idle
+2017-01-11 20:57:26.666|2017-01-11 20:57:26.666| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bfb16|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:26.672|2017-01-11 20:57:26.672| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df55724|00000000|000|000| 1| 1033| 0| 0| 0|idle
+2017-01-11 20:57:26.672|2017-01-11 20:57:26.672| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83688b08|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:29.819|2017-01-11 20:57:29.819| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83688b08|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:29.819|2017-01-11 20:57:29.819| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| AP| 0| 0| 0|836890b0|00000000|000|000| 1| 908| 0| 0| 0|idle
+2017-01-11 20:57:29.819|2017-01-11 20:57:29.819| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df55af9|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:29.819|2017-01-11 20:57:29.819| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53bfb16|00000000|000|000| 1| 864| 0| 0| 0|idle
+2017-01-11 20:57:29.859|2017-01-11 20:57:29.859| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c6fc6|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:29.880|2017-01-11 20:57:29.880| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| A| 0| 0| 0|8df55af9|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:29.880|2017-01-11 20:57:29.880| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50183| AP| 0| 0| 0|8df560a1|00000000|000|000| 1| 187| 0| 0| 0|idle
+2017-01-11 20:57:29.880|2017-01-11 20:57:29.880| 0.000| 0.000| 6| 192.168.66.1|50183| 192.168.66.121| 8080| A| 0| 0| 0|83689408|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:29.904|2017-01-11 20:57:29.904| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c6fc6|00000000|000|000| 1| 1067| 0| 0| 0|idle
+2017-01-11 20:57:29.904|2017-01-11 20:57:29.904| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bfe42|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:30.749|2017-01-11 20:57:30.749| 0.000| 0.000| 17| 192.168.66.1| 5353| 224.0.0.251| 5353| 0| 0| 0| 0|00000000|00000000|000|000| 1| 68| 0| 0| 0|idle
+2017-01-11 20:57:30.871|2017-01-11 20:57:30.871| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53bfe42|00000000|000|000| 1| 1500| 0| 0| 0|idle
+2017-01-11 20:57:30.871|2017-01-11 20:57:30.871| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c73bd|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:30.871|2017-01-11 20:57:30.871| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53c03ea|00000000|000|000| 1| 136| 0| 0| 0|idle
+2017-01-11 20:57:30.871|2017-01-11 20:57:30.871| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| A| 0| 0| 0|185c73bd|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:30.874|2017-01-11 20:57:30.874| 0.000| 0.000| 6| 192.168.66.121| 8080| 192.168.66.1|50182| AP| 0| 0| 0|185c73bd|00000000|000|000| 1| 678| 0| 0| 0|idle
+2017-01-11 20:57:30.875|2017-01-11 20:57:30.875| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| A| 0| 0| 0|e53c043e|00000000|000|000| 1| 52| 0| 0| 0|idle
+2017-01-11 20:57:31.755|2017-01-11 20:57:31.755| 0.000| 0.000| 17| 192.168.66.1| 5353| 224.0.0.251| 5353| 0| 0| 0| 0|00000000|00000000|000|000| 1| 68| 0| 0| 0|idle
+2017-01-11 20:57:32.919|2017-01-11 20:57:32.919| 0.000| 0.000| 6| 192.168.66.1|50182| 192.168.66.121| 8080| AP| 0| 0| 0|e53c043e|00000000|000|000|
<TRUNCATED>