{"timestamp":"2024-07-08T15:29:51.295937+0000","flow_id":1840668331939218,"pcap_cnt":17362,"event_type":"tls","src_ip":"10.3.10.6","src_port":52847,"dest_ip":"57.129.37.28","dest_port":443,"proto":"TCP","pkt_src":"wire/pcap","tls":{"subject":"CN=AnyNet Relay, O=philandro Software GmbH, C=DE","issuerdn":"CN=AnyNet Root CA 2, O=philandro Software GmbH, C=DE","serial":"00:A3:8E:F9:1F:E7:79:41:9D","fingerprint":"99:a2:6b:f3:2c:7d:19:82:d5:70:5d:c6:64:a3:5a:3b:e4:88:bd:4c","version":"TLS 1.2","notbefore":"2019-02-27T21:07:28","notafter":"2029-02-24T21:07:28","client":{"subject":"CN=AnyDesk Client","issuerdn":"CN=AnyDesk Client","fingerprint":"a8:72:01:aa:7b:64:da:a2:ec:89:0b:53:0a:85:4c:2c:8b:71:c3:33","serial":"01","notbefore":"2024-07-08T15:29:50","notafter":"2074-06-26T15:29:50"}}}
{"timestamp":"2024-07-08T15:29:51.523871+0000","flow_id":2017879650791544,"pcap_cnt":17378,"event_type":"tls","src_ip":"10.3.10.6","src_port":52848,"dest_ip":"64.31.23.30","dest_port":443,"proto":"TCP","pkt_src":"wire/pcap","tls":{"subject":"CN=AnyNet Relay, O=philandro Software GmbH, C=DE","issuerdn":"CN=AnyNet Root CA 2, O=philandro Software GmbH, C=DE","serial":"00:A3:8E:F9:1F:E7:79:41:9D","fingerprint":"99:a2:6b:f3:2c:7d:19:82:d5:70:5d:c6:64:a3:5a:3b:e4:88:bd:4c","version":"TLS 1.2","notbefore":"2019-02-27T21:07:28","notafter":"2029-02-24T21:07:28","client":{"subject":"CN=AnyDesk Client","issuerdn":"CN=AnyDesk Client","fingerprint":"a8:72:01:aa:7b:64:da:a2:ec:89:0b:53:0a:85:4c:2c:8b:71:c3:33","serial":"01","notbefore":"2024-07-08T15:29:50","notafter":"2074-06-26T15:29:50"}}}
{"timestamp":"2024-07-08T15:29:52.367879+0000","flow_id":242850804180619,"pcap_cnt":17930,"event_type":"fileinfo","src_ip":"10.3.10.6","src_port":52852,"dest_ip":"13.224.214.128","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"api.playanext.com","url":"/httpapi","http_user_agent":"AnyDesk/8.0.10","http_content_type":"application/json","http_method":"POST","protocol":"HTTP/1.1","status":200,"length":0},"app_proto":"http","fileinfo":{"filename":"/httpapi","gaps":false,"state":"CLOSED","stored":false,"size":354,"tx_id":0}}
{"timestamp":"2024-07-08T15:29:52.367879+0000","flow_id":242850804180619,"pcap_cnt":17930,"event_type":"http","src_ip":"10.3.10.6","src_port":52852,"dest_ip":"13.224.214.128","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","tx_id":0,"http":{"hostname":"api.playanext.com","url":"/httpapi","http_user_agent":"AnyDesk/8.0.10","http_content_type":"application/json","http_method":"POST","protocol":"HTTP/1.1","status":200,"length":0,"request_headers":[{"name":"Host","value":"api.playanext.com"},{"name":"User-Agent","value":"AnyDesk/8.0.10"},{"name":"Accept","value":"*/*"},{"name":"Content-Length","value":"354"},{"name":"Content-Type","value":"application/x-www-form-urlencoded"}],"response_headers":[{"name":"Content-Type","value":"application/json"},{"name":"Content-Length","value":"0"},{"name":"Connection","value":"keep-alive"},{"name":"Date","value":"Mon, 08 Jul 2024 15:29:52 GMT"},{"name":"x-amzn-RequestId","value":"fdbbfba1-40d9-471c-bf50-36f1209504c9"},{"name":"x-amz-apigw-id","value":"amXdmHunoAMEFCg="},{"name":"X-Amzn-Trace-Id","value":"Root=1-668c05f0-2faf91d82ab7ef5f13f34263;Parent=154c4c6fbb9426f5;Sampled=0;lineage=d7502c8f:0"},{"name":"Via","value":"1.1 09271a32d559aa027d52f6c914ebff78.cloudfront.net (CloudFront), 1.1 191d4b07c4ff3e2c7cfeea67e1eb00f0.cloudfront.net (CloudFront)"},{"name":"X-Amz-Cf-Pop","value":"PHL51-P1, PHL50-C1"},{"name":"X-Cache","value":"Miss from cloudfront"},{"name":"X-Amz-Cf-Id","value":"9ZPDVmoNuGV3tlZmmBsErtxLSX5YLDVf0M_5pcCFe1olvjJRZDZmkw=="}]}}