{"timestamp":"2023-09-30T18:59:14.283410+0000","flow_id":1044413358061550,"in_iface":"ens5","event_type":"flow","src_ip":"192.168.1.1","src_port":58910,"dest_ip":"192.168.1.2","dest_port":80,"proto":"TCP","app_proto":"http","flow":{"pkts_toserver":5,"pkts_toclient":5,"bytes_toserver":619,"bytes_toclient":729,"start":"2023-09-30T18:55:48.440302+0000","end":"2023-09-30T18:55:48.581089+0000","age":0,"state":"closed","reason":"timeout","alerted":false},"tcp":{"tcp_flags":"1b","tcp_flags_ts":"1b","tcp_flags_tc":"1b","syn":true,"fin":true,"psh":true,"ack":true,"state":"closed"}}
{"timestamp":"2023-09-30T18:59:10.275210+0000","flow_id":1042160647726015,"in_iface":"ens5","event_type":"flow","src_ip":"192.168.1.1","src_port":58920,"dest_ip":"192.168.1.2","dest_port":80,"proto":"TCP","app_proto":"http","flow":{"pkts_toserver":5,"pkts_toclient":5,"bytes_toserver":1586,"bytes_toclient":729,"start":"2023-09-30T18:55:48.582591+0000","end":"2023-09-30T18:55:48.723196+0000","age":0,"state":"closed","reason":"timeout","alerted":false},"tcp":{"tcp_flags":"1b","tcp_flags_ts":"1b","tcp_flags_tc":"1b","syn":true,"fin":true,"psh":true,"ack":true,"state":"closed"}}
{"timestamp":"2023-09-30T18:55:48.723196+0000","flow_id":1042160647726015,"in_iface":"ens5","event_type":"fileinfo","src_ip":"192.168.1.2","src_port":80,"dest_ip":"192.168.1.1","dest_port":58920,"proto":"TCP","http":{"hostname":"example.com","url":"/_api/web/siteusers","http_user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36","http_content_type":"text/html","http_method":"GET","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/_api/web/siteusers","length":162},"app_proto":"http","fileinfo":{"filename":"/_api/web/siteusers","sid":[],"gaps":false,"state":"CLOSED","stored":false,"size":162,"tx_id":0}}
{"timestamp":"2023-09-30T18:55:48.722948+0000","flow_id":1042160647726015,"in_iface":"ens5","event_type":"http","src_ip":"192.168.1.1","src_port":58920,"dest_ip":"192.168.1.2","dest_port":80,"proto":"TCP","tx_id":0,"http":{"hostname":"example.com","url":"/_api/web/siteusers","http_user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36","http_content_type":"text/html","http_method":"GET","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/_api/web/siteusers","length":162}}
{"timestamp":"2023-09-30T18:55:48.581089+0000","flow_id":1044413358061550,"in_iface":"ens5","event_type":"fileinfo","src_ip":"192.168.1.2","src_port":80,"dest_ip":"192.168.1.1","dest_port":58910,"proto":"TCP","http":{"hostname":"example.com","url":"/_api/web/siteusers","http_user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36","http_content_type":"text/html","http_method":"GET","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/_api/web/siteusers","length":162},"app_proto":"http","fileinfo":{"filename":"/_api/web/siteusers","sid":[],"gaps":false,"state":"CLOSED","stored":false,"size":162,"tx_id":0}}
{"timestamp":"2023-09-30T18:55:48.579343+0000","flow_id":1044413358061550,"in_iface":"ens5","event_type":"http","src_ip":"192.168.1.1","src_port":58910,"dest_ip":"192.168.1.2","dest_port":80,"proto":"TCP","tx_id":0,"http":{"hostname":"example.com","url":"/_api/web/siteusers","http_user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36","http_content_type":"text/html","http_method":"GET","protocol":"HTTP/1.1","status":200,"redirect":"https://example.com/_api/web/siteusers","length":162}}