{"timestamp":"2024-02-05T19:51:25.287063+0000","flow_id":1444144699250620,"in_iface":"ens5","event_type":"fileinfo","src_ip":"1.2.3.1","src_port":80,"dest_ip":"4.5.1.5","dest_port":58947,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"example.com","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/dana-ws/saml20.ws","length":162},"app_proto":"http","fileinfo":{"filename":"/dana-ws/saml20.ws","gaps":false,"state":"CLOSED","stored":false,"size":162,"tx_id":0}}
{"timestamp":"2024-02-05T19:51:25.285771+0000","flow_id":1444144699250620,"in_iface":"ens5","event_type":"http","src_ip":"4.5.1.5","src_port":58947,"dest_ip":"1.2.3.1","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","tx_id":0,"http":{"hostname":"example.com","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/dana-ws/saml20.ws","length":162}}
{"timestamp":"2024-02-05T19:51:25.285771+0000","flow_id":1444144699250620,"in_iface":"ens5","event_type":"fileinfo","src_ip":"4.5.1.5","src_port":58947,"dest_ip":"1.2.3.1","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"example.com","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/dana-ws/saml20.ws","length":162},"app_proto":"http","fileinfo":{"filename":"/dana-ws/saml20.ws","gaps":false,"state":"CLOSED","stored":false,"size":792,"tx_id":0}}
{"timestamp":"2024-02-05T12:39:30.187710+0000","flow_id":511824285609660,"in_iface":"ens5","event_type":"fileinfo","src_ip":"1.1.12.1","src_port":80,"dest_ip":"1.17.1.2","dest_port":51870,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"4.2.5.1","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://4.2.5.1/dana-ws/saml20.ws","length":162},"app_proto":"http","fileinfo":{"filename":"/dana-ws/saml20.ws","gaps":false,"state":"CLOSED","stored":false,"size":162,"tx_id":0}}
{"timestamp":"2024-02-05T12:39:30.187415+0000","flow_id":511824285609660,"in_iface":"ens5","event_type":"http","src_ip":"1.17.1.2","src_port":51870,"dest_ip":"1.1.12.1","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","tx_id":0,"http":{"hostname":"4.2.5.1","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://4.2.5.1/dana-ws/saml20.ws","length":162}}
{"timestamp":"2024-02-05T12:39:30.187415+0000","flow_id":511824285609660,"in_iface":"ens5","event_type":"fileinfo","src_ip":"1.17.1.2","src_port":51870,"dest_ip":"1.1.12.1","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"4.2.5.1","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://4.2.5.1/dana-ws/saml20.ws","length":162},"app_proto":"http","fileinfo":{"filename":"/dana-ws/saml20.ws","gaps":false,"state":"CLOSED","stored":false,"size":923,"tx_id":0}}
{"timestamp":"2024-02-05T02:57:26.691287+0000","flow_id":2234698342105491,"in_iface":"ens5","event_type":"fileinfo","src_ip":"1.3.1.2","src_port":80,"dest_ip":"1.0.29.1","dest_port":8002,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"5.5.3.2","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0","xff":"104.238.130.6","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://5.5.3.2/dana-ws/saml20.ws","length":162},"app_proto":"http","fileinfo":{"filename":"/dana-ws/saml20.ws","gaps":false,"state":"CLOSED","stored":false,"size":162,"tx_id":0}}
{"timestamp":"2024-02-05T02:56:21.688461+0000","flow_id":2234698342105491,"in_iface":"ens5","event_type":"http","src_ip":"1.0.29.1","src_port":8002,"dest_ip":"1.3.1.2","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","tx_id":0,"http":{"hostname":"5.5.3.2","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0","xff":"104.238.130.6","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://5.5.3.2/dana-ws/saml20.ws","length":162}}
{"timestamp":"2024-02-05T02:56:21.688461+0000","flow_id":2234698342105491,"in_iface":"ens5","event_type":"fileinfo","src_ip":"1.0.29.1","src_port":8002,"dest_ip":"1.3.1.2","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"5.5.3.2","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0","xff":"104.238.130.6","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://5.5.3.2/dana-ws/saml20.ws","length":162},"app_proto":"http","fileinfo":{"filename":"/dana-ws/saml20.ws","gaps":false,"state":"CLOSED","stored":false,"size":792,"tx_id":0}}
{"timestamp":"2024-02-04T22:06:44.239800+0000","flow_id":1243687277067113,"in_iface":"ens5","event_type":"fileinfo","src_ip":"1.2.3.1","src_port":80,"dest_ip":"4.5.1.5","dest_port":53506,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"example.com","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/dana-ws/saml20.ws","length":162},"app_proto":"http","fileinfo":{"filename":"/dana-ws/saml20.ws","gaps":false,"state":"CLOSED","stored":false,"size":162,"tx_id":0}}
{"timestamp":"2024-02-04T22:06:44.239346+0000","flow_id":1243687277067113,"in_iface":"ens5","event_type":"http","src_ip":"4.5.1.5","src_port":53506,"dest_ip":"1.2.3.1","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","tx_id":0,"http":{"hostname":"example.com","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/dana-ws/saml20.ws","length":162}}
{"timestamp":"2024-02-04T22:06:44.239346+0000","flow_id":1243687277067113,"in_iface":"ens5","event_type":"fileinfo","src_ip":"4.5.1.5","src_port":53506,"dest_ip":"1.2.3.1","dest_port":80,"proto":"TCP","pkt_src":"wire/pcap","http":{"hostname":"example.com","url":"/dana-ws/saml20.ws","http_user_agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36","http_content_type":"text/html","http_method":"POST","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/dana-ws/saml20.ws","length":162},"app_proto":"http","fileinfo":{"filename":"/dana-ws/saml20.ws","gaps":false,"state":"CLOSED","stored":false,"size":788,"tx_id":0}}