{"ts":"2024-02-27T08:10:31.082816Z","uid":"CwmSSA4EhHrRkVEeb","id.orig_h":"10.0.1.14","id.orig_p":53704,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"smb,ntlm,gssapi","duration":0.7016260623931885,"orig_bytes":1114,"resp_bytes":837,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":7,"orig_ip_bytes":1406,"resp_pkts":5,"resp_ip_bytes":1049,"tunnel_parents":["CkQjdc2LpKJv71fZl9"]}
{"ts":"2024-02-27T08:09:18.226989Z","uid":"CdT8v11LoZ2LVbkKI1","id.orig_h":"10.0.1.14","id.orig_p":53692,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5700609683990479,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["Cnd3R74oFFKvVW1h55"]}
{"ts":"2024-02-27T08:09:17.666249Z","uid":"CW6PMd1db851lsAeee","id.orig_h":"10.0.1.14","id.orig_p":53691,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5596680641174316,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CUILDz0PzRNQBzUv"]}
{"ts":"2024-02-27T08:09:17.106351Z","uid":"CkVy5V1FWEg3BdjOkk","id.orig_h":"10.0.1.14","id.orig_p":53690,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5576000213623047,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CvfrBT25oGLxS0Jgkj"]}
{"ts":"2024-02-27T08:09:16.551926Z","uid":"Ctwib03BmotFvhF145","id.orig_h":"10.0.1.14","id.orig_p":53689,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5532491207122803,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CS2kTe21dfsaxdUSn1"]}
{"ts":"2024-02-27T08:09:15.987774Z","uid":"CXJRwXFb2YG6RyXC8","id.orig_h":"10.0.1.14","id.orig_p":53688,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5629451274871826,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["C92mxh2tvcuTy9JHdk"]}
{"ts":"2024-02-27T08:09:15.422820Z","uid":"CktUz33PpzzoFh9rt2","id.orig_h":"10.0.1.14","id.orig_p":53687,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5639200210571289,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CF7Ntw2kt0uCZyonmd"]}
{"ts":"2024-02-27T08:09:14.582897Z","uid":"C0HFRgjUpePEopldd","id.orig_h":"10.0.1.14","id.orig_p":53686,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.8389019966125488,"orig_bytes":1697,"resp_bytes":1053,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":8,"orig_ip_bytes":2029,"resp_pkts":6,"resp_ip_bytes":1305,"tunnel_parents":["Cmt6ua3wjeDFBtNTJd"]}
{"ts":"2024-02-27T08:09:13.738249Z","uid":"Ccdq5epRSDLX6pgh8","id.orig_h":"10.0.1.14","id.orig_p":53685,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.8434088230133057,"orig_bytes":1697,"resp_bytes":1053,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":8,"orig_ip_bytes":2029,"resp_pkts":6,"resp_ip_bytes":1305,"tunnel_parents":["CLRtTq16HxF0zlcCX4"]}
{"ts":"2024-02-27T08:09:13.175949Z","uid":"CH0GDolx4of6f2lVk","id.orig_h":"10.0.1.14","id.orig_p":53684,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.561182975769043,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CC4Fdx45IaF3EOGxn1"]}
{"ts":"2024-02-27T08:09:12.622911Z","uid":"CNubz44Pjc0ggub1Kb","id.orig_h":"10.0.1.14","id.orig_p":53683,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5520060062408447,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CcHGKK1lnnixUQplGk"]}
{"ts":"2024-02-27T08:09:12.056039Z","uid":"CjW4f03ilu3NFOLFU5","id.orig_h":"10.0.1.14","id.orig_p":53682,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5657999515533447,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CaWKvL3Vqt29Kp8lp6"]}
{"ts":"2024-02-27T08:09:11.493692Z","uid":"CcwCjf4z7wkLOb6jO1","id.orig_h":"10.0.1.14","id.orig_p":53681,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5611000061035156,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["C3hXtJ2RRCcJJUbXk8"]}
{"ts":"2024-02-27T08:09:10.926446Z","uid":"Cm7LBM2p9nfiF28oa7","id.orig_h":"10.0.1.14","id.orig_p":53680,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.566215991973877,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["Cjwx9EiESEQz26xl3"]}
{"ts":"2024-02-27T08:09:10.358108Z","uid":"CfUFoR2tXcQ5RhwSLa","id.orig_h":"10.0.1.14","id.orig_p":53679,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.567209005355835,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CLxY6Y3lRtGdFzJHf1"]}
{"ts":"2024-02-27T08:09:09.797739Z","uid":"CLj5qo16WJDek1WjG8","id.orig_h":"10.0.1.14","id.orig_p":53678,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5592100620269775,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CUi21s37xMHUxv6iGj"]}
{"ts":"2024-02-27T08:09:07.000441Z","uid":"C1FcMt141jJOQ97sCa","id.orig_h":"10.0.1.14","id.orig_p":53676,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5602359771728516,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["C9hroJ2Ds2f3wRDCh1"]}
{"ts":"2024-02-27T08:09:06.438480Z","uid":"CFRP6c2vTSlt1zQ5Dh","id.orig_h":"10.0.1.14","id.orig_p":53675,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"ntlm,smb,gssapi","duration":0.5608911514282227,"orig_bytes":975,"resp_bytes":663,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":6,"orig_ip_bytes":1227,"resp_pkts":4,"resp_ip_bytes":835,"tunnel_parents":["CCnw2m3Yl3hwS5cbJa"]}
{"ts":"2024-02-27T08:09:05.739271Z","uid":"CufG5OrBSBeh6Cn42","id.orig_h":"10.0.1.14","id.orig_p":53674,"id.resp_h":"18.153.126.41","id.resp_p":445,"proto":"tcp","service":"smb,ntlm,gssapi","duration":0.697458028793335,"orig_bytes":1134,"resp_bytes":837,"conn_state":"RSTO","local_orig":true,"local_resp":false,"missed_bytes":0,"history":"ShADdR","orig_pkts":7,"orig_ip_bytes":1426,"resp_pkts":5,"resp_ip_bytes":1049,"tunnel_parents":["C7R0bf3Wa4qWF2wEc4"]}