{"timestamp":"2023-10-17T01:24:52.149017+0000","flow_id":721124494649885,"in_iface":"ens5","event_type":"flow","src_ip":"192.0.2.1","src_port":30880,"dest_ip":"192.0.2.2","dest_port":80,"proto":"TCP","app_proto":"http","flow":{"pkts_toserver":6,"pkts_toclient":4,"bytes_toserver":640,"bytes_toclient":660,"start":"2023-10-17T01:20:23.829981+0000","end":"2023-10-17T01:22:11.831172+0000","age":108,"state":"closed","reason":"timeout","alerted":false},"tcp":{"tcp_flags":"1b","tcp_flags_ts":"1b","tcp_flags_tc":"1b","syn":true,"fin":true,"psh":true,"ack":true,"state":"closed"}}
{"timestamp":"2023-10-17T01:22:11.830494+0000","flow_id":721124494649885,"in_iface":"ens5","event_type":"fileinfo","src_ip":"192.0.2.2","src_port":80,"dest_ip":"192.0.2.1","dest_port":30880,"proto":"TCP","http":{"hostname":"example.com","url":"/webui/logoutconfirm.html?logon_hash=1","http_user_agent":"curl/7.81.0","xff":"71.148.62.164","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/webui/logoutconfirm.html?logon_hash=1","length":162},"app_proto":"http","fileinfo":{"filename":"/webui/logoutconfirm.html","sid":[],"gaps":false,"state":"CLOSED","stored":false,"size":162,"tx_id":0}}
{"timestamp":"2023-10-17T01:21:12.717267+0000","flow_id":721124494649885,"in_iface":"ens5","event_type":"http","src_ip":"192.0.2.1","src_port":30880,"dest_ip":"192.0.2.2","dest_port":80,"proto":"TCP","tx_id":0,"http":{"hostname":"example.com","url":"/webui/logoutconfirm.html?logon_hash=1","http_user_agent":"curl/7.81.0","xff":"71.148.62.164","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/webui/logoutconfirm.html?logon_hash=1","length":162}}