gfwleak/cuiyiming-gradproj
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
This repository has been archived on 2025-09-14. You can view files and clone it, but cannot push or open issues or pull requests.
Files
b66d14ce674eff25c839ec7fd5efabf943211d0d
cuiyiming-gradproj/DataSet/result/2019-12-04-1/stream_feature.txt
崔一鸣 b66d14ce67 完成流特征统计插件
2019-12-06 19:47:46 +08:00

3649 lines
4.8 MiB
Raw Blame History

{"sip":"192.168.50.193","sport":50121,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1521,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":31},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50116,"dip":"17.248.161.106","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17324,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58441,"dip":"17.57.145.85","dport":443,"proto":"tcp","c2s_bytes":222,"s2c_bytes":3432,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17867,"packets":[{"bytes":222,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":552,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"courier.push.apple.com","alpn":"\u0010apns-security-v3\fapns-pack-v1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,16,5,18,23]}}
{"sip":"192.168.50.193","sport":50122,"dip":"121.51.118.79","dport":443,"proto":"tcp","c2s_bytes":1016,"s2c_bytes":4998,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":30414,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":6},{"bytes":1440,"dir":2,"interval":-6},{"bytes":301,"dir":2,"interval":6},{"bytes":242,"dir":2,"interval":37},{"bytes":53,"dir":1,"interval":330},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":316,"dir":1,"interval":0},{"bytes":96,"dir":2,"interval":59},{"bytes":38,"dir":1,"interval":44},{"bytes":39,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"support.weixin.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50141,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4184,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":921,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":32},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50159,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":1993,"s2c_bytes":257347,"c2s_pkts":17,"s2c_pkts":183,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1430,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":932},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":286,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":94},{"bytes":38,"dir":1,"interval":8},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":641,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":141,"dir":1,"interval":1902},{"bytes":1426,"dir":2,"interval":1903},{"bytes":86,"dir":1,"interval":45},{"bytes":86,"dir":1,"interval":0},{"bytes":87,"dir":1,"interval":0},{"bytes":87,"dir":1,"interval":0},{"bytes":86,"dir":1,"interval":0},{"bytes":87,"dir":1,"interval":0},{"bytes":86,"dir":1,"interval":0},{"bytes":87,"dir":1,"interval":0},{"bytes":87,"dir":1,"interval":0},{"bytes":87,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":46},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"h5.ssp.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50177,"dip":"182.254.59.166","dport":443,"proto":"tcp","c2s_bytes":1379,"s2c_bytes":271611,"c2s_pkts":10,"s2c_pkts":190,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":830},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":312,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":724},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pp.myapp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50166,"dip":"203.205.179.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4624,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":4567,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":254,"dir":2,"interval":462},{"bytes":274,"dir":2,"interval":461}],"tls":{"version":"tls1.2","sni":"otheve.beacon.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50190,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4184,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1649,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50151,"dip":"203.205.179.229","dport":443,"proto":"tcp","c2s_bytes":1396,"s2c_bytes":4952,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":10411,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":269,"dir":2,"interval":465},{"bytes":274,"dir":2,"interval":461},{"bytes":530,"dir":1,"interval":4108},{"bytes":349,"dir":1,"interval":2},{"bytes":313,"dir":2,"interval":1994}],"tls":{"version":"tls1.2","sni":"otheve.beacon.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50161,"dip":"182.254.50.64","dport":443,"proto":"tcp","c2s_bytes":4301,"s2c_bytes":22842,"c2s_pkts":17,"s2c_pkts":31,"total_pkts":48,"duration":7929,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":496,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1622},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":320,"dir":1,"interval":0},{"bytes":59,"dir":1,"interval":0},{"bytes":484,"dir":1,"interval":0},{"bytes":480,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":1561},{"bytes":55,"dir":2,"interval":5},{"bytes":1440,"dir":2,"interval":55},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":311,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":361,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":4},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":892,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":903},{"bytes":66,"dir":1,"interval":0},{"bytes":66,"dir":1,"interval":0},{"bytes":619,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":619,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":837},{"bytes":55,"dir":2,"interval":1},{"bytes":143,"dir":2,"interval":0},{"bytes":143,"dir":2,"interval":0},{"bytes":143,"dir":2,"interval":3},{"bytes":65,"dir":1,"interval":2391},{"bytes":115,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":2386},{"bytes":143,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"news.ssp.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50200,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1065,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50199,"dip":"121.51.118.79","dport":443,"proto":"tcp","c2s_bytes":1225,"s2c_bytes":8539,"c2s_pkts":6,"s2c_pkts":9,"total_pkts":15,"duration":3138,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":-6},{"bytes":301,"dir":2,"interval":6},{"bytes":242,"dir":2,"interval":36},{"bytes":53,"dir":1,"interval":195},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":525,"dir":1,"interval":0},{"bytes":96,"dir":2,"interval":69},{"bytes":38,"dir":1,"interval":39},{"bytes":1440,"dir":2,"interval":40},{"bytes":1440,"dir":2,"interval":0},{"bytes":700,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"weixin110.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50162,"dip":"203.187.160.135","dport":443,"proto":"tcp","c2s_bytes":1332,"s2c_bytes":14437,"c2s_pkts":10,"s2c_pkts":16,"total_pkts":26,"duration":21273,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1224,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":3},{"bytes":53,"dir":1,"interval":1271},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":318,"dir":1,"interval":0},{"bytes":77,"dir":1,"interval":0},{"bytes":78,"dir":1,"interval":0},{"bytes":85,"dir":1,"interval":0},{"bytes":74,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":299},{"bytes":38,"dir":1,"interval":3},{"bytes":1448,"dir":2,"interval":3},{"bytes":605,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":217,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":825,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":276,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":751,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mat1.gtimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50212,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4184,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1619,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50150,"dip":"58.250.137.40","dport":443,"proto":"tcp","c2s_bytes":4111,"s2c_bytes":60921,"c2s_pkts":11,"s2c_pkts":52,"total_pkts":63,"duration":35432,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":275,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":386},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":265,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":85},{"bytes":1440,"dir":2,"interval":111},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":167,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":38},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":38},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":38},{"bytes":1440,"dir":2,"interval":0},{"bytes":1188,"dir":2,"interval":0},{"bytes":195,"dir":1,"interval":582},{"bytes":1440,"dir":2,"interval":395},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":669,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":127,"dir":1,"interval":2955},{"bytes":1290,"dir":2,"interval":2941},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":38},{"bytes":882,"dir":2,"interval":0},{"bytes":1220,"dir":1,"interval":234},{"bytes":164,"dir":1,"interval":3},{"bytes":1440,"dir":2,"interval":193},{"bytes":1092,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":74},{"bytes":1440,"dir":2,"interval":0},{"bytes":1208,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":53,"dir":2,"interval":0},{"bytes":961,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"view.inews.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50163,"dip":"111.161.64.20","dport":443,"proto":"tcp","c2s_bytes":3484,"s2c_bytes":24457,"c2s_pkts":11,"s2c_pkts":25,"total_pkts":36,"duration":31542,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":496,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1081},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":317,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":775,"dir":1,"interval":0},{"bytes":774,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":4},{"bytes":38,"dir":2,"interval":377},{"bytes":55,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":8},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1252,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":7},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1336,"dir":2,"interval":0},{"bytes":72,"dir":1,"interval":42},{"bytes":774,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":28},{"bytes":1440,"dir":2,"interval":13},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"n.ssp.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50178,"dip":"182.254.50.112","dport":443,"proto":"tcp","c2s_bytes":1172,"s2c_bytes":4654,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":33317,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1253,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":655,"dir":1,"interval":1695},{"bytes":263,"dir":2,"interval":1075}],"tls":{"version":"tls1.2","sni":"v.gdt.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50160,"dip":"182.254.21.113","dport":443,"proto":"tcp","c2s_bytes":24833,"s2c_bytes":9421,"c2s_pkts":39,"s2c_pkts":71,"total_pkts":110,"duration":36930,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":919},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":103,"dir":1,"interval":0},{"bytes":746,"dir":1,"interval":0},{"bytes":793,"dir":1,"interval":0},{"bytes":797,"dir":1,"interval":0},{"bytes":756,"dir":1,"interval":0},{"bytes":349,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":89},{"bytes":102,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":7},{"bytes":1440,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1325,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":2},{"bytes":280,"dir":2,"interval":1},{"bytes":102,"dir":2,"interval":4},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":5},{"bytes":200,"dir":1,"interval":53},{"bytes":102,"dir":2,"interval":46},{"bytes":38,"dir":2,"interval":0},{"bytes":915,"dir":1,"interval":123},{"bytes":102,"dir":2,"interval":124},{"bytes":38,"dir":2,"interval":0},{"bytes":920,"dir":1,"interval":217},{"bytes":748,"dir":1,"interval":5},{"bytes":102,"dir":2,"interval":217},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":199,"dir":1,"interval":235},{"bytes":102,"dir":2,"interval":232},{"bytes":38,"dir":2,"interval":0},{"bytes":738,"dir":1,"interval":686},{"bytes":686,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":688},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":199,"dir":1,"interval":590},{"bytes":573,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":121,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":581},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":565,"dir":1,"interval":45},{"bytes":106,"dir":1,"interval":0},{"bytes":573,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":38},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":8},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":691,"dir":1,"interval":57},{"bytes":102,"dir":2,"interval":49},{"bytes":38,"dir":2,"interval":0},{"bytes":793,"dir":1,"interval":181},{"bytes":102,"dir":2,"interval":182},{"bytes":38,"dir":2,"interval":0},{"bytes":691,"dir":1,"interval":249},{"bytes":102,"dir":2,"interval":248},{"bytes":38,"dir":2,"interval":0},{"bytes":199,"dir":1,"interval":151},{"bytes":102,"dir":2,"interval":151},{"bytes":38,"dir":2,"interval":0},{"bytes":690,"dir":1,"interval":874},{"bytes":102,"dir":2,"interval":875},{"bytes":38,"dir":2,"interval":0},{"bytes":738,"dir":1,"interval":1276},{"bytes":102,"dir":2,"interval":1275},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":242},{"bytes":102,"dir":2,"interval":242},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"btrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50205,"dip":"182.254.59.166","dport":443,"proto":"tcp","c2s_bytes":1241,"s2c_bytes":64089,"c2s_pkts":8,"s2c_pkts":51,"total_pkts":59,"duration":25688,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1431,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1049},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":356,"dir":1,"interval":0},{"bytes":143,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":607},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":644,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":1399},{"bytes":42,"dir":1,"interval":3722}],"tls":{"version":"tls1.2","sni":"mmbiz.qlogo.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50221,"dip":"121.51.118.79","dport":443,"proto":"tcp","c2s_bytes":1331,"s2c_bytes":5115,"c2s_pkts":9,"s2c_pkts":10,"total_pkts":19,"duration":14496,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":301,"dir":2,"interval":5},{"bytes":242,"dir":2,"interval":37},{"bytes":53,"dir":1,"interval":284},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":320,"dir":1,"interval":0},{"bytes":96,"dir":2,"interval":141},{"bytes":38,"dir":1,"interval":76},{"bytes":39,"dir":2,"interval":42},{"bytes":106,"dir":1,"interval":10162},{"bytes":103,"dir":1,"interval":-204},{"bytes":39,"dir":2,"interval":10205},{"bytes":39,"dir":2,"interval":42},{"bytes":102,"dir":1,"interval":2002},{"bytes":39,"dir":2,"interval":1747}],"tls":{"version":"tls1.2","sni":"support.weixin.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50228,"dip":"17.248.161.106","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":596,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":80}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50236,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4184,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1099,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50251,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":611,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50252,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":862,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50259,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":876,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50258,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3353,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50262,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":937,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50265,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":991,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50266,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":893,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50268,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":608,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"un.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50254,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":2137,"s2c_bytes":4840,"c2s_pkts":9,"s2c_pkts":9,"total_pkts":18,"duration":6049,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":901},{"bytes":50,"dir":1,"interval":1},{"bytes":42,"dir":1,"interval":0},{"bytes":391,"dir":1,"interval":0},{"bytes":66,"dir":1,"interval":0},{"bytes":490,"dir":1,"interval":0},{"bytes":490,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":24},{"bytes":55,"dir":2,"interval":0},{"bytes":268,"dir":2,"interval":5},{"bytes":268,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"api.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50267,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":664,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"perf.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50253,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":1717,"s2c_bytes":9013,"c2s_pkts":7,"s2c_pkts":12,"total_pkts":19,"duration":6048,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":946},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":413,"dir":1,"interval":0},{"bytes":604,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":66},{"bytes":42,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":304,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":3}],"tls":{"version":"tls1.2","sni":"api.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50250,"dip":"120.52.148.150","dport":443,"proto":"tcp","c2s_bytes":12056,"s2c_bytes":4794,"c2s_pkts":15,"s2c_pkts":10,"total_pkts":25,"duration":6070,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":408},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":389,"dir":1,"interval":0},{"bytes":63,"dir":1,"interval":0},{"bytes":60,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":4},{"bytes":38,"dir":2,"interval":147},{"bytes":68,"dir":2,"interval":6},{"bytes":1460,"dir":1,"interval":313},{"bytes":1460,"dir":1,"interval":6},{"bytes":662,"dir":1,"interval":-314},{"bytes":159,"dir":2,"interval":318},{"bytes":159,"dir":2,"interval":5},{"bytes":159,"dir":2,"interval":9}],"tls":{"version":"tls1.2","sni":"blackhole.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50257,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":5279,"s2c_bytes":4579,"c2s_pkts":10,"s2c_pkts":8,"total_pkts":18,"duration":5820,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2123},{"bytes":50,"dir":1,"interval":29},{"bytes":42,"dir":1,"interval":0},{"bytes":161,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":958},{"bytes":42,"dir":2,"interval":0},{"bytes":288,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"ex.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50256,"dip":"111.13.29.161","dport":443,"proto":"tcp","c2s_bytes":1173,"s2c_bytes":4403,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":4618,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2571},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":405,"dir":1,"interval":0},{"bytes":68,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":49},{"bytes":42,"dir":2,"interval":7},{"bytes":112,"dir":2,"interval":3}],"tls":{"version":"tls1.2","sni":"policy.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50255,"dip":"120.52.83.74","dport":443,"proto":"tcp","c2s_bytes":5165,"s2c_bytes":5640,"c2s_pkts":15,"s2c_pkts":16,"total_pkts":31,"duration":6049,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":228},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":403,"dir":1,"interval":0},{"bytes":582,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":150},{"bytes":38,"dir":1,"interval":5},{"bytes":42,"dir":2,"interval":4},{"bytes":237,"dir":2,"interval":3},{"bytes":63,"dir":1,"interval":152},{"bytes":630,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":149},{"bytes":237,"dir":2,"interval":8},{"bytes":63,"dir":1,"interval":2070},{"bytes":42,"dir":2,"interval":2062},{"bytes":966,"dir":1,"interval":947},{"bytes":237,"dir":2,"interval":951},{"bytes":63,"dir":1,"interval":32},{"bytes":954,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":29},{"bytes":237,"dir":2,"interval":28},{"bytes":63,"dir":1,"interval":1850},{"bytes":678,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1822},{"bytes":237,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"mars.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50249,"dip":"211.144.24.150","dport":443,"proto":"tcp","c2s_bytes":1348,"s2c_bytes":5020,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":5837,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":395},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":388,"dir":1,"interval":0},{"bytes":260,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":21},{"bytes":42,"dir":2,"interval":4},{"bytes":729,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"ccf.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50260,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":3765,"s2c_bytes":5199,"c2s_pkts":11,"s2c_pkts":11,"total_pkts":22,"duration":3400,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1066},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":409,"dir":1,"interval":0},{"bytes":83,"dir":1,"interval":0},{"bytes":1080,"dir":1,"interval":0},{"bytes":652,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":95},{"bytes":55,"dir":2,"interval":0},{"bytes":235,"dir":2,"interval":16},{"bytes":280,"dir":2,"interval":2},{"bytes":80,"dir":1,"interval":1531},{"bytes":761,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1511},{"bytes":338,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"api.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50269,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":102,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58581,"dip":"17.57.145.84","dport":443,"proto":"tcp","c2s_bytes":222,"s2c_bytes":3431,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17646,"packets":[{"bytes":222,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1399,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"courier.push.apple.com","alpn":"\u0010apns-security-v3\fapns-pack-v1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,16,5,18,23]}}
{"sip":"192.168.50.193","sport":58602,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":57,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58600,"dip":"182.61.200.37","dport":443,"proto":"tcp","c2s_bytes":198,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":63,"packets":[{"bytes":198,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bdbus-turbonet.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58601,"dip":"182.61.200.37","dport":443,"proto":"tcp","c2s_bytes":198,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":63,"packets":[{"bytes":198,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bdbus-turbonet.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58603,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":60,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58604,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":59,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58605,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":58,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58607,"dip":"182.61.200.37","dport":443,"proto":"tcp","c2s_bytes":204,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":57,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bdbus-turbonet.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58606,"dip":"182.61.200.37","dport":443,"proto":"tcp","c2s_bytes":204,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":57,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bdbus-turbonet.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58609,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":51,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58610,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":55,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58612,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":3685,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":86,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58611,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":114,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58598,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":264,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58613,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":135,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58614,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":137,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50241,"dip":"17.248.161.106","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3340,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17790,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58616,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":8,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58617,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":61,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58618,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":3002,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":39,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58619,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":61,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58620,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":84,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58621,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":73,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58615,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":991,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58622,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":136,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":14},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58623,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":64,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":7},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58624,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58625,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58627,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":43,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58628,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":75,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58630,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":48,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58629,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":225,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58631,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":48,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58632,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58634,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":607,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58636,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4041,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":93,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":5},{"bytes":9,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50273,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":2255,"s2c_bytes":56659,"c2s_pkts":3,"s2c_pkts":49,"total_pkts":52,"duration":5090,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":237},{"bytes":286,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":74},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1127,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1300,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58633,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1222,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58637,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":108,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58639,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":53,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58640,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":46,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58638,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":229,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58641,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":50,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50274,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":267,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50276,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":260,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":5},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50277,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":337,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":11},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":11}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50288,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4296,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":79,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":10},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":14}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58635,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1214,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58642,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58644,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":572,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58645,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":53,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58643,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":657,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":4},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58646,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":39,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58647,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":45,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58648,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":92,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":23},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58649,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":54,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58650,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":90,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58651,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":48,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58652,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":55,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58653,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58654,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":68,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50280,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":2352,"s2c_bytes":23475,"c2s_pkts":9,"s2c_pkts":24,"total_pkts":33,"duration":5345,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1372},{"bytes":53,"dir":1,"interval":136},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1340,"dir":1,"interval":0},{"bytes":20,"dir":1,"interval":0},{"bytes":166,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":336},{"bytes":38,"dir":1,"interval":3},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":247,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1320,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t8.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50279,"dip":"182.61.128.198","dport":443,"proto":"tcp","c2s_bytes":1970,"s2c_bytes":19036,"c2s_pkts":8,"s2c_pkts":21,"total_pkts":29,"duration":6111,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":76,"dir":2,"interval":0},{"bytes":94,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":205},{"bytes":287,"dir":2,"interval":3},{"bytes":287,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":58,"dir":1,"interval":7},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":10},{"bytes":717,"dir":1,"interval":8},{"bytes":31,"dir":1,"interval":6},{"bytes":1340,"dir":2,"interval":20},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":-6},{"bytes":748,"dir":2,"interval":6},{"bytes":31,"dir":2,"interval":-5}],"tls":{"version":"tls1.2","sni":"mss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50286,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":2612,"s2c_bytes":4527,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":5134,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":226},{"bytes":596,"dir":1,"interval":0},{"bytes":47,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":88}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50290,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":2521,"s2c_bytes":33833,"c2s_pkts":10,"s2c_pkts":32,"total_pkts":42,"duration":4466,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1244},{"bytes":53,"dir":1,"interval":11},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1340,"dir":1,"interval":0},{"bytes":21,"dir":1,"interval":0},{"bytes":166,"dir":1,"interval":0},{"bytes":168,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":40},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1154,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":745,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":646,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t7.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50278,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":5636,"s2c_bytes":180814,"c2s_pkts":7,"s2c_pkts":138,"total_pkts":145,"duration":6186,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":11},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":164},{"bytes":596,"dir":1,"interval":0},{"bytes":654,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":363},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":720,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1425,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":481,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":707},{"bytes":596,"dir":1,"interval":0},{"bytes":369,"dir":1,"interval":0},{"bytes":1214,"dir":2,"interval":391},{"bytes":1460,"dir":2,"interval":0},{"bytes":861,"dir":2,"interval":0},{"bytes":44,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50281,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":2185,"s2c_bytes":13086,"c2s_pkts":8,"s2c_pkts":15,"total_pkts":23,"duration":5345,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1369},{"bytes":53,"dir":1,"interval":139},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1340,"dir":1,"interval":0},{"bytes":19,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":336},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":596,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t9.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50283,"dip":"123.125.115.82","dport":443,"proto":"tcp","c2s_bytes":3142,"s2c_bytes":4525,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":5295,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":110},{"bytes":596,"dir":1,"interval":0},{"bytes":577,"dir":1,"interval":0},{"bytes":332,"dir":2,"interval":63}],"tls":{"version":"tls1.2","sni":"fclick.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50289,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":4495,"s2c_bytes":4701,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":5046,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":81},{"bytes":516,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":111},{"bytes":1452,"dir":1,"interval":967},{"bytes":558,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":968}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50284,"dip":"182.61.200.171","dport":443,"proto":"tcp","c2s_bytes":6245,"s2c_bytes":5171,"c2s_pkts":7,"s2c_pkts":13,"total_pkts":20,"duration":5295,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":107},{"bytes":596,"dir":1,"interval":0},{"bytes":1021,"dir":1,"interval":1},{"bytes":358,"dir":2,"interval":72},{"bytes":131,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":343},{"bytes":596,"dir":1,"interval":0},{"bytes":611,"dir":1,"interval":0},{"bytes":358,"dir":2,"interval":342},{"bytes":131,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ada.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50287,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":4027,"s2c_bytes":4527,"c2s_pkts":5,"s2c_pkts":10,"total_pkts":15,"duration":5135,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":730,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":220},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":1},{"bytes":10,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":109}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50282,"dip":"182.61.128.198","dport":443,"proto":"tcp","c2s_bytes":2420,"s2c_bytes":4588,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":5345,"packets":[{"bytes":599,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":698,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":2},{"bytes":303,"dir":2,"interval":0},{"bytes":638,"dir":1,"interval":153},{"bytes":58,"dir":1,"interval":49},{"bytes":1125,"dir":1,"interval":0},{"bytes":604,"dir":2,"interval":95}],"tls":{"version":"tls1.2","sni":"cambrian-images.cdn.bcebos.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":50285,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":6695,"s2c_bytes":4978,"c2s_pkts":8,"s2c_pkts":12,"total_pkts":20,"duration":7371,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":150},{"bytes":596,"dir":1,"interval":0},{"bytes":169,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":168},{"bytes":1452,"dir":1,"interval":89},{"bytes":518,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":99},{"bytes":1452,"dir":1,"interval":1055},{"bytes":539,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":1069}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58655,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":50,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58656,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":39,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58657,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":55,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58658,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":57,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58659,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":53,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58660,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":58,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58661,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":114,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58626,"dip":"122.205.109.31","dport":443,"proto":"tcp","c2s_bytes":663,"s2c_bytes":46877,"c2s_pkts":6,"s2c_pkts":41,"total_pkts":47,"duration":21069,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":108},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":826},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":289,"dir":1,"interval":1},{"bytes":38,"dir":1,"interval":14},{"bytes":38,"dir":2,"interval":195},{"bytes":1340,"dir":2,"interval":115},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":6},{"bytes":1340,"dir":2,"interval":77},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":3},{"bytes":46,"dir":2,"interval":19868},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gss3.bdstatic.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58662,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":69,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58663,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58669,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":45,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58668,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":83,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58667,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":128,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58670,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":41,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58672,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":67,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58673,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":67,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58674,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":13,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58671,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":155,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58666,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":379,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":3},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58676,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":109,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":3},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58675,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":224,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58680,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":31,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58682,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":66,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58679,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":178,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58683,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":113,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58681,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":172,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58678,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":382,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58677,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":930,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":12},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58665,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1233,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58684,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":88,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58685,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":57,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50271,"dip":"123.125.114.8","dport":443,"proto":"tcp","c2s_bytes":2695,"s2c_bytes":4371,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":30146,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":2},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1284,"dir":1,"interval":139},{"bytes":894,"dir":1,"interval":0},{"bytes":147,"dir":2,"interval":88},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"hmma.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58693,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":3685,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1978,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58692,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1982,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50293,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":574,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58710,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":744,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":21},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58713,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":302,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58709,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1067,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58714,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":49,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58664,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1235,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58708,"dip":"182.61.62.31","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1312,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"vse.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58707,"dip":"182.61.62.31","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1313,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"vse.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58712,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":411,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50294,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":1224,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58716,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":38,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50295,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":342,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":5},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58704,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1236,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58717,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":104,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58715,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1068,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58718,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":57,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58719,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":55,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58720,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58721,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":76,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58722,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":69,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58723,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":54,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58724,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":50,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58725,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":59,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58726,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":68,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58727,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":146,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58729,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":168,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58730,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":160,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58731,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":140,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58732,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":152,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58728,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":596,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58735,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":251,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58734,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":581,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58733,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":645,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58737,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":100,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":6},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58736,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":110,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58738,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":94,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58739,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":55,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58740,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":51,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58743,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58744,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50298,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4184,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1103,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":18},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58745,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":62,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58746,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":54,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58747,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":196,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58749,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":264,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":52},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58750,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":157,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":11},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58752,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":45,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58751,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":45,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58753,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":59,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58742,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4370,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":1006,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58741,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1060,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50272,"dip":"61.135.186.152","dport":443,"proto":"tcp","c2s_bytes":3908,"s2c_bytes":4860,"c2s_pkts":5,"s2c_pkts":12,"total_pkts":17,"duration":43124,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1318,"dir":1,"interval":71},{"bytes":318,"dir":2,"interval":20},{"bytes":1452,"dir":1,"interval":13043},{"bytes":596,"dir":1,"interval":0},{"bytes":25,"dir":1,"interval":0},{"bytes":318,"dir":2,"interval":13044},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"nsclick.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50270,"dip":"182.61.200.17","dport":443,"proto":"tcp","c2s_bytes":4183,"s2c_bytes":5442,"c2s_pkts":11,"s2c_pkts":21,"total_pkts":32,"duration":45134,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":453},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":870,"dir":1,"interval":0},{"bytes":129,"dir":1,"interval":0},{"bytes":598,"dir":1,"interval":0},{"bytes":598,"dir":1,"interval":0},{"bytes":84,"dir":2,"interval":92},{"bytes":38,"dir":1,"interval":4},{"bytes":42,"dir":2,"interval":2},{"bytes":42,"dir":2,"interval":0},{"bytes":92,"dir":2,"interval":21},{"bytes":357,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":72},{"bytes":338,"dir":2,"interval":0},{"bytes":754,"dir":1,"interval":14659},{"bytes":534,"dir":1,"interval":4},{"bytes":42,"dir":2,"interval":14572},{"bytes":68,"dir":2,"interval":6},{"bytes":76,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"sofire.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58748,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1211,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58756,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":231,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50305,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4311,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":233,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":12}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58757,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":49,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50307,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4311,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":166,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":12}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50308,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4311,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":206,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":45}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50306,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":10033,"s2c_bytes":244328,"c2s_pkts":13,"s2c_pkts":187,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":173},{"bytes":596,"dir":1,"interval":0},{"bytes":692,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1151},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":499,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":705,"dir":2,"interval":0},{"bytes":314,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":65},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":387,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":883,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":354,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1807},{"bytes":596,"dir":1,"interval":686},{"bytes":223,"dir":1,"interval":0},{"bytes":1111,"dir":2,"interval":1276},{"bytes":1452,"dir":1,"interval":41},{"bytes":596,"dir":1,"interval":0},{"bytes":199,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1310,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":867,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":75},{"bytes":596,"dir":1,"interval":0},{"bytes":210,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":74},{"bytes":1460,"dir":2,"interval":0},{"bytes":174,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58759,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":58,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58760,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4370,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":57,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":3},{"bytes":9,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50325,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4296,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":483,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58761,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":240,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50303,"dip":"17.248.160.117","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":654,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":443,"dir":2,"interval":2},{"bytes":327,"dir":2,"interval":112}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58758,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2010,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58763,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":130,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58608,"dip":"182.61.240.23","dport":443,"proto":"tcp","c2s_bytes":1851,"s2c_bytes":3991,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":51763,"packets":[{"bytes":174,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":264,"dir":2,"interval":0},{"bytes":186,"dir":2,"interval":35},{"bytes":126,"dir":1,"interval":594},{"bytes":1145,"dir":1,"interval":4},{"bytes":417,"dir":2,"interval":429},{"bytes":223,"dir":1,"interval":396},{"bytes":71,"dir":2,"interval":394},{"bytes":152,"dir":1,"interval":206},{"bytes":133,"dir":2,"interval":202},{"bytes":31,"dir":1,"interval":50559}],"tls":{"version":"tls1.2","sni":"pimc.baidu.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":58762,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":475,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50317,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":2414,"s2c_bytes":40234,"c2s_pkts":10,"s2c_pkts":39,"total_pkts":49,"duration":3330,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2314},{"bytes":53,"dir":1,"interval":54},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1307,"dir":1,"interval":0},{"bytes":94,"dir":1,"interval":0},{"bytes":93,"dir":1,"interval":0},{"bytes":94,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":77},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":86,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":595,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":134}],"tls":{"version":"tls1.2","sni":"ss0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50312,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":2666,"s2c_bytes":5738,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":3353,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1380},{"bytes":596,"dir":1,"interval":8},{"bytes":101,"dir":1,"interval":-328},{"bytes":1460,"dir":2,"interval":646},{"bytes":13,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50320,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":10951,"s2c_bytes":5328,"c2s_pkts":13,"s2c_pkts":13,"total_pkts":26,"duration":2578,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1016},{"bytes":596,"dir":1,"interval":0},{"bytes":159,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":477},{"bytes":1452,"dir":1,"interval":85},{"bytes":545,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":105},{"bytes":1452,"dir":1,"interval":142},{"bytes":539,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":135},{"bytes":1452,"dir":1,"interval":105},{"bytes":543,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":177},{"bytes":1452,"dir":1,"interval":1178},{"bytes":596,"dir":1,"interval":0},{"bytes":196,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50319,"dip":"123.125.115.82","dport":443,"proto":"tcp","c2s_bytes":5855,"s2c_bytes":4857,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":2578,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":242},{"bytes":596,"dir":1,"interval":38},{"bytes":645,"dir":1,"interval":0},{"bytes":332,"dir":2,"interval":203},{"bytes":1452,"dir":1,"interval":966},{"bytes":596,"dir":1,"interval":0},{"bytes":597,"dir":1,"interval":0},{"bytes":332,"dir":2,"interval":966}],"tls":{"version":"tls1.2","sni":"fclick.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50318,"dip":"122.14.43.170","dport":443,"proto":"tcp","c2s_bytes":1631,"s2c_bytes":6588,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":3330,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1301,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":828},{"bytes":53,"dir":1,"interval":161},{"bytes":50,"dir":1,"interval":-97},{"bytes":38,"dir":2,"interval":267},{"bytes":885,"dir":1,"interval":103},{"bytes":1460,"dir":2,"interval":50},{"bytes":520,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tva3.sinaimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50326,"dip":"182.61.200.171","dport":443,"proto":"tcp","c2s_bytes":3307,"s2c_bytes":4682,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":1438,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":135},{"bytes":596,"dir":1,"interval":0},{"bytes":742,"dir":1,"interval":0},{"bytes":358,"dir":2,"interval":26},{"bytes":131,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ada.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50327,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":2440,"s2c_bytes":4876,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":1438,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":180},{"bytes":471,"dir":1,"interval":0},{"bytes":596,"dir":2,"interval":31}],"tls":{"version":"tls1.2","sni":"sp0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50323,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":6669,"s2c_bytes":4963,"c2s_pkts":8,"s2c_pkts":12,"total_pkts":20,"duration":1603,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":200},{"bytes":596,"dir":1,"interval":18},{"bytes":73,"dir":1,"interval":3},{"bytes":262,"dir":2,"interval":171},{"bytes":1452,"dir":1,"interval":94},{"bytes":543,"dir":1,"interval":4},{"bytes":262,"dir":2,"interval":110},{"bytes":1452,"dir":1,"interval":1189},{"bytes":584,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":1179}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58695,"dip":"222.199.191.49","dport":443,"proto":"tcp","c2s_bytes":190,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":22067,"packets":[{"bytes":190,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1111,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":49},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":19997},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"timgmb.bdimg.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58697,"dip":"222.199.191.49","dport":443,"proto":"tcp","c2s_bytes":190,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":22054,"packets":[{"bytes":190,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1111,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":47},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"timgmb.bdimg.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58696,"dip":"222.199.191.49","dport":443,"proto":"tcp","c2s_bytes":190,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":22058,"packets":[{"bytes":190,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1111,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":47},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"timgmb.bdimg.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58690,"dip":"222.199.191.48","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":22100,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1111,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":66},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"flpc.bdstatic.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58688,"dip":"122.205.109.48","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":22230,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":115},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20011},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"f12.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58687,"dip":"122.205.109.48","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":22233,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":115},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20009},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"f11.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58686,"dip":"122.205.109.48","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":22227,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":114},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20009},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"f10.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50324,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":4025,"s2c_bytes":4527,"c2s_pkts":5,"s2c_pkts":10,"total_pkts":15,"duration":3246,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":502},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":8,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":131}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50315,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":4974,"s2c_bytes":72053,"c2s_pkts":7,"s2c_pkts":62,"total_pkts":69,"duration":5050,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":839},{"bytes":596,"dir":1,"interval":0},{"bytes":163,"dir":1,"interval":79},{"bytes":1460,"dir":2,"interval":196},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":407,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1078,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":451},{"bytes":596,"dir":1,"interval":0},{"bytes":198,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":447},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":202,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":766,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50316,"dip":"182.61.128.195","dport":443,"proto":"tcp","c2s_bytes":1877,"s2c_bytes":10032,"c2s_pkts":8,"s2c_pkts":13,"total_pkts":21,"duration":5050,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":829},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":851,"dir":1,"interval":0},{"bytes":200,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":112},{"bytes":985,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":577,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":200}],"tls":{"version":"tls1.2","sni":"ss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50310,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":2537,"s2c_bytes":30522,"c2s_pkts":10,"s2c_pkts":30,"total_pkts":40,"duration":5094,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1399},{"bytes":53,"dir":1,"interval":11},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1340,"dir":1,"interval":0},{"bytes":39,"dir":1,"interval":0},{"bytes":165,"dir":1,"interval":0},{"bytes":167,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":436},{"bytes":38,"dir":1,"interval":5},{"bytes":1340,"dir":2,"interval":44},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":13},{"bytes":1340,"dir":2,"interval":0},{"bytes":1322,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":18},{"bytes":1340,"dir":2,"interval":0},{"bytes":1295,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":209,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t7.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50313,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":5254,"s2c_bytes":29881,"c2s_pkts":7,"s2c_pkts":33,"total_pkts":40,"duration":5070,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":858},{"bytes":596,"dir":1,"interval":0},{"bytes":84,"dir":1,"interval":80},{"bytes":1460,"dir":2,"interval":196},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1190,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":830},{"bytes":596,"dir":1,"interval":0},{"bytes":557,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1525},{"bytes":310,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":604,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":872,"dir":2,"interval":0},{"bytes":44,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50314,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":2204,"s2c_bytes":10077,"c2s_pkts":8,"s2c_pkts":13,"total_pkts":21,"duration":5070,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1380},{"bytes":53,"dir":1,"interval":11},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1340,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":424},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":267,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":376}],"tls":{"version":"tls1.2","sni":"t8.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50309,"dip":"182.61.128.194","dport":443,"proto":"tcp","c2s_bytes":1601,"s2c_bytes":35681,"c2s_pkts":7,"s2c_pkts":32,"total_pkts":39,"duration":5095,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":873},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":775,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":113},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":116,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":204}],"tls":{"version":"tls1.2","sni":"gss3.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50311,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":2507,"s2c_bytes":54153,"c2s_pkts":11,"s2c_pkts":48,"total_pkts":59,"duration":5071,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2304},{"bytes":53,"dir":1,"interval":4},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":48},{"bytes":1307,"dir":1,"interval":17},{"bytes":94,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":94,"dir":1,"interval":0},{"bytes":94,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":22},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":722,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":366,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1123,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":28},{"bytes":1340,"dir":2,"interval":0},{"bytes":1327,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":24},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":567,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50328,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1701,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58791,"dip":"1.56.130.210","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":3030,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":529,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":26}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"","cipher_suites":["c02b","c02f","009e","c02c","c030","009f","c009","c023","c013","c027","0033","0067","c00a","c024","c014","c028","0039","006b","009c","009d","002f","003c","0035","003d","000a"],"extensions_list":[65281,0,23,35,13,11,10]}}
{"sip":"192.168.50.193","sport":58795,"dip":"1.56.130.210","dport":443,"proto":"tcp","c2s_bytes":1039,"s2c_bytes":4718,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":548,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":28},{"bytes":118,"dir":1,"interval":424},{"bytes":730,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":103},{"bytes":197,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"","cipher_suites":["c02b","c02f","009e","c02c","c030","009f","c009","c023","c013","c027","0033","0067","c00a","c024","c014","c028","0039","006b","009c","009d","002f","003c","0035","003d","000a"],"extensions_list":[65281,0,23,35,13,11,10]}}
{"sip":"192.168.50.193","sport":50340,"dip":"182.18.72.73","dport":443,"proto":"tcp","c2s_bytes":546,"s2c_bytes":3932,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":580,"packets":[{"bytes":546,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":20},{"bytes":287,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":50341,"dip":"182.18.72.73","dport":443,"proto":"tcp","c2s_bytes":546,"s2c_bytes":3932,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":839,"packets":[{"bytes":546,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":13},{"bytes":287,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":58802,"dip":"175.174.56.250","dport":443,"proto":"tcp","c2s_bytes":1059,"s2c_bytes":4735,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":319,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":26},{"bytes":118,"dir":1,"interval":204},{"bytes":750,"dir":1,"interval":30},{"bytes":1460,"dir":2,"interval":140},{"bytes":214,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"","cipher_suites":["c02b","c02f","009e","c02c","c030","009f","c009","c023","c013","c027","0033","0067","c00a","c024","c014","c028","0039","006b","009c","009d","002f","003c","0035","003d","000a"],"extensions_list":[65281,0,23,35,13,11,10]}}
{"sip":"192.168.50.193","sport":58800,"dip":"175.174.56.250","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":3030,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":504,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":26}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"","cipher_suites":["c02b","c02f","009e","c02c","c030","009f","c009","c023","c013","c027","0033","0067","c00a","c024","c014","c028","0039","006b","009c","009d","002f","003c","0035","003d","000a"],"extensions_list":[65281,0,23,35,13,11,10]}}
{"sip":"192.168.50.193","sport":50346,"dip":"122.14.43.166","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":3448,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":1198,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":1186}],"tls":{"version":"tls1.2","sni":"p3-dy.byteimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58599,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":403,"s2c_bytes":7070,"c2s_pkts":2,"s2c_pkts":12,"total_pkts":14,"duration":60251,"packets":[{"bytes":165,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":238,"dir":1,"interval":265},{"bytes":1053,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":646,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":59981}],"tls":{"version":"tls1.2","sni":"","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58755,"dip":"17.57.145.84","dport":443,"proto":"tcp","c2s_bytes":222,"s2c_bytes":3431,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17304,"packets":[{"bytes":222,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1399,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"courier.push.apple.com","alpn":"\u0010apns-security-v3\fapns-pack-v1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,16,5,18,23]}}
{"sip":"192.168.50.193","sport":50275,"dip":"180.149.145.245","dport":443,"proto":"tcp","c2s_bytes":6135,"s2c_bytes":4967,"c2s_pkts":10,"s2c_pkts":16,"total_pkts":26,"duration":54779,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":6},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":150},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1441,"dir":1,"interval":0},{"bytes":75,"dir":2,"interval":53},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":20},{"bytes":318,"dir":2,"interval":44},{"bytes":138,"dir":2,"interval":0},{"bytes":89,"dir":1,"interval":24266},{"bytes":1452,"dir":1,"interval":248},{"bytes":1001,"dir":1,"interval":76},{"bytes":1452,"dir":1,"interval":-272},{"bytes":42,"dir":2,"interval":24559},{"bytes":138,"dir":2,"interval":4},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"voice.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50351,"dip":"182.18.72.73","dport":443,"proto":"tcp","c2s_bytes":2091,"s2c_bytes":39042,"c2s_pkts":7,"s2c_pkts":32,"total_pkts":39,"duration":8467,"packets":[{"bytes":546,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":10},{"bytes":287,"dir":2,"interval":0},{"bytes":585,"dir":1,"interval":384},{"bytes":58,"dir":1,"interval":165},{"bytes":280,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":319},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":55,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":4032},{"bytes":1448,"dir":2,"interval":4030},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":115,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":3832},{"bytes":1448,"dir":2,"interval":3838},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1158,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":43}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":50291,"dip":"112.80.248.38","dport":443,"proto":"tcp","c2s_bytes":2070,"s2c_bytes":4504,"c2s_pkts":7,"s2c_pkts":15,"total_pkts":22,"duration":36825,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":26},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":6734},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":885,"dir":1,"interval":0},{"bytes":485,"dir":1,"interval":0},{"bytes":75,"dir":2,"interval":2271},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":32},{"bytes":81,"dir":2,"interval":5},{"bytes":50,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":454},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"pimlog.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58780,"dip":"121.22.232.217","dport":443,"proto":"tcp","c2s_bytes":13415,"s2c_bytes":145304,"c2s_pkts":35,"s2c_pkts":165,"total_pkts":200,"duration":0,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":104},{"bytes":45,"dir":1,"interval":3},{"bytes":48,"dir":1,"interval":4},{"bytes":34,"dir":1,"interval":6},{"bytes":725,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":24},{"bytes":527,"dir":1,"interval":24},{"bytes":808,"dir":1,"interval":0},{"bytes":447,"dir":1,"interval":11},{"bytes":746,"dir":1,"interval":0},{"bytes":475,"dir":1,"interval":0},{"bytes":525,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":915,"dir":2,"interval":36},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":351,"dir":2,"interval":29},{"bytes":38,"dir":2,"interval":0},{"bytes":351,"dir":2,"interval":5},{"bytes":38,"dir":2,"interval":0},{"bytes":419,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":510,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":60},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":719,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":203,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":201,"dir":1,"interval":393},{"bytes":254,"dir":2,"interval":304},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":78},{"bytes":277,"dir":2,"interval":63},{"bytes":38,"dir":2,"interval":0},{"bytes":617,"dir":1,"interval":1249},{"bytes":410,"dir":2,"interval":1277},{"bytes":38,"dir":2,"interval":0},{"bytes":482,"dir":1,"interval":124},{"bytes":147,"dir":1,"interval":0},{"bytes":430,"dir":2,"interval":136},{"bytes":38,"dir":2,"interval":0},{"bytes":488,"dir":1,"interval":1086},{"bytes":147,"dir":1,"interval":0},{"bytes":486,"dir":2,"interval":1063},{"bytes":38,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":494},{"bytes":147,"dir":1,"interval":0},{"bytes":443,"dir":2,"interval":525},{"bytes":38,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":1226},{"bytes":147,"dir":1,"interval":0},{"bytes":535,"dir":2,"interval":1232},{"bytes":38,"dir":2,"interval":0},{"bytes":486,"dir":1,"interval":2404},{"bytes":147,"dir":1,"interval":0},{"bytes":459,"dir":2,"interval":2405},{"bytes":38,"dir":2,"interval":0},{"bytes":704,"dir":1,"interval":2157},{"bytes":147,"dir":1,"interval":268},{"bytes":456,"dir":2,"interval":2376},{"bytes":38,"dir":2,"interval":0},{"bytes":557,"dir":1,"interval":1762},{"bytes":474,"dir":1,"interval":0},{"bytes":1034,"dir":2,"interval":2059},{"bytes":38,"dir":2,"interval":0},{"bytes":536,"dir":1,"interval":959},{"bytes":1460,"dir":2,"interval":678},{"bytes":1152,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":788,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":226},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1436,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":23,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":534,"dir":1,"interval":417},{"bytes":1460,"dir":2,"interval":225},{"bytes":1206,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":26,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":33,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1412,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":502,"dir":1,"interval":418},{"bytes":656,"dir":2,"interval":332},{"bytes":38,"dir":2,"interval":0},{"bytes":534,"dir":1,"interval":845},{"bytes":1460,"dir":2,"interval":1879},{"bytes":1096,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"is-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58803,"dip":"110.249.203.159","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":3467,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":15556,"packets":[{"bytes":216,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1361,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":18},{"bytes":118,"dir":1,"interval":537},{"bytes":593,"dir":1,"interval":0},{"bytes":357,"dir":2,"interval":112},{"bytes":31,"dir":2,"interval":15000}],"tls":{"version":"tls1.2","sni":"quic-amemv-all-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50339,"dip":"17.248.161.111","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5621,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":17063,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":93,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50334,"dip":"182.18.72.73","dport":443,"proto":"tcp","c2s_bytes":3536,"s2c_bytes":259896,"c2s_pkts":11,"s2c_pkts":189,"total_pkts":200,"duration":0,"packets":[{"bytes":581,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":477,"dir":2,"interval":0},{"bytes":620,"dir":1,"interval":716},{"bytes":303,"dir":2,"interval":11},{"bytes":303,"dir":2,"interval":0},{"bytes":58,"dir":1,"interval":12},{"bytes":280,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":583,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":2136},{"bytes":1448,"dir":2,"interval":2122},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":908,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":633,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":2388},{"bytes":1448,"dir":2,"interval":2375},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":865,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":2214},{"bytes":1448,"dir":2,"interval":2213},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":526,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":3825},{"bytes":1448,"dir":2,"interval":3827},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":3096},{"bytes":1448,"dir":2,"interval":3098},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1158,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":1228},{"bytes":1448,"dir":2,"interval":1220},{"bytes":1448,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":279,"dir":1,"interval":1921}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":50375,"dip":"27.221.59.197","dport":443,"proto":"tcp","c2s_bytes":911,"s2c_bytes":284864,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":16},{"bytes":126,"dir":1,"interval":524},{"bytes":268,"dir":1,"interval":707},{"bytes":1460,"dir":2,"interval":1212},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":54,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p3.pstatp.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50380,"dip":"27.221.59.197","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":5815,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":1621,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":15},{"bytes":126,"dir":1,"interval":898},{"bytes":268,"dir":1,"interval":486},{"bytes":1460,"dir":2,"interval":1125},{"bytes":1325,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":222}],"tls":{"version":"tls1.2","sni":"p3.pstatp.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50390,"dip":"182.18.72.73","dport":443,"proto":"tcp","c2s_bytes":1131,"s2c_bytes":3932,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":2121,"packets":[{"bytes":546,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":19},{"bytes":287,"dir":2,"interval":0},{"bytes":585,"dir":1,"interval":1384}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":50331,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":2962,"s2c_bytes":8841,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30091,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":73,"dir":2,"interval":0},{"bytes":465,"dir":1,"interval":85},{"bytes":1440,"dir":1,"interval":0},{"bytes":540,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30028}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50349,"dip":"114.113.88.125","dport":443,"proto":"tcp","c2s_bytes":961,"s2c_bytes":57041,"c2s_pkts":4,"s2c_pkts":42,"total_pkts":46,"duration":31372,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":151,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":118},{"bytes":287,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":915,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31243}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50358,"dip":"114.113.88.125","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":78392,"c2s_pkts":4,"s2c_pkts":55,"total_pkts":59,"duration":32150,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":69},{"bytes":268,"dir":1,"interval":49},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":0},{"bytes":1327,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":988,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32027}],"tls":{"version":"tls1.2","sni":"p1.pstatp.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50355,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":999,"s2c_bytes":26096,"c2s_pkts":4,"s2c_pkts":21,"total_pkts":25,"duration":32152,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":753},{"bytes":325,"dir":1,"interval":238},{"bytes":1460,"dir":2,"interval":881},{"bytes":1460,"dir":2,"interval":0},{"bytes":57,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":722,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31158}],"tls":{"version":"tls1.2","sni":"p3-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50329,"dip":"221.195.244.233","dport":443,"proto":"tcp","c2s_bytes":2960,"s2c_bytes":5098,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":45150,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":17},{"bytes":126,"dir":1,"interval":1596},{"bytes":638,"dir":1,"interval":12},{"bytes":505,"dir":1,"interval":0},{"bytes":967,"dir":2,"interval":949},{"bytes":34,"dir":2,"interval":0},{"bytes":638,"dir":1,"interval":12126},{"bytes":505,"dir":1,"interval":0},{"bytes":958,"dir":2,"interval":12134},{"bytes":78,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31397}],"tls":{"version":"tls1.2","sni":"mon.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50342,"dip":"114.113.88.125","dport":443,"proto":"tcp","c2s_bytes":2394,"s2c_bytes":72209,"c2s_pkts":9,"s2c_pkts":55,"total_pkts":64,"duration":46444,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":166,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":267},{"bytes":287,"dir":1,"interval":91},{"bytes":1460,"dir":2,"interval":226},{"bytes":1460,"dir":2,"interval":0},{"bytes":1328,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":637,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":665,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":9533},{"bytes":1460,"dir":2,"interval":9533},{"bytes":1460,"dir":2,"interval":0},{"bytes":947,"dir":2,"interval":0},{"bytes":286,"dir":1,"interval":4846},{"bytes":1460,"dir":2,"interval":4841},{"bytes":1460,"dir":2,"interval":0},{"bytes":1201,"dir":2,"interval":0},{"bytes":286,"dir":1,"interval":157},{"bytes":880,"dir":2,"interval":181},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":693,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":608},{"bytes":1460,"dir":2,"interval":584},{"bytes":1460,"dir":2,"interval":0},{"bytes":454,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":600},{"bytes":1460,"dir":2,"interval":599},{"bytes":1460,"dir":2,"interval":0},{"bytes":740,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30341}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58773,"dip":"124.132.134.229","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":50259,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":221}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58776,"dip":"124.132.134.229","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":50260,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":15},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":165}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58775,"dip":"124.132.134.229","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":50259,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":221}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58774,"dip":"124.132.134.229","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":50259,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":221}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58778,"dip":"124.132.134.229","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":50260,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":230}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58777,"dip":"124.132.134.229","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":50260,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":230}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58767,"dip":"220.243.131.102","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":50535,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":235}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58766,"dip":"220.243.131.102","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":50550,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":251}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58764,"dip":"220.243.131.102","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":50588,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":326}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58781,"dip":"119.249.58.213","dport":443,"proto":"tcp","c2s_bytes":319,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":50239,"packets":[{"bytes":201,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":119}],"tls":{"version":"tls1.2","sni":"mr.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50361,"dip":"182.18.72.73","dport":443,"proto":"tcp","c2s_bytes":1773,"s2c_bytes":11515,"c2s_pkts":6,"s2c_pkts":11,"total_pkts":17,"duration":36467,"packets":[{"bytes":546,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":585,"dir":1,"interval":183},{"bytes":287,"dir":2,"interval":13},{"bytes":287,"dir":2,"interval":0},{"bytes":58,"dir":1,"interval":20},{"bytes":280,"dir":1,"interval":1},{"bytes":1448,"dir":2,"interval":28},{"bytes":1448,"dir":2,"interval":0},{"bytes":645,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":5694},{"bytes":1448,"dir":2,"interval":5702},{"bytes":1448,"dir":2,"interval":0},{"bytes":1146,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30559}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":50368,"dip":"27.221.59.197","dport":443,"proto":"tcp","c2s_bytes":1478,"s2c_bytes":11418,"c2s_pkts":6,"s2c_pkts":9,"total_pkts":15,"duration":33808,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":15},{"bytes":126,"dir":1,"interval":688},{"bytes":268,"dir":1,"interval":690},{"bytes":1460,"dir":2,"interval":1195},{"bytes":1327,"dir":2,"interval":0},{"bytes":268,"dir":1,"interval":489},{"bytes":1460,"dir":2,"interval":490},{"bytes":1325,"dir":2,"interval":0},{"bytes":268,"dir":1,"interval":522},{"bytes":1460,"dir":2,"interval":521},{"bytes":1325,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31401}],"tls":{"version":"tls1.2","sni":"p3.pstatp.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50354,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":1248,"s2c_bytes":13305,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":40867,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":774},{"bytes":287,"dir":1,"interval":239},{"bytes":1460,"dir":2,"interval":882},{"bytes":1460,"dir":2,"interval":0},{"bytes":158,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":61,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":8792},{"bytes":1460,"dir":2,"interval":8812},{"bytes":1460,"dir":2,"interval":0},{"bytes":909,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31024}],"tls":{"version":"tls1.2","sni":"p3-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50350,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":3528,"s2c_bytes":94914,"c2s_pkts":13,"s2c_pkts":77,"total_pkts":90,"duration":52459,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":378},{"bytes":287,"dir":1,"interval":180},{"bytes":1460,"dir":2,"interval":344},{"bytes":1460,"dir":2,"interval":0},{"bytes":822,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":7812},{"bytes":1460,"dir":2,"interval":7801},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":59,"dir":2,"interval":0},{"bytes":217,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":3144},{"bytes":1460,"dir":2,"interval":3162},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":484,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":1274},{"bytes":1460,"dir":2,"interval":1262},{"bytes":1460,"dir":2,"interval":0},{"bytes":1155,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":623},{"bytes":1460,"dir":2,"interval":619},{"bytes":1460,"dir":2,"interval":0},{"bytes":1334,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":640},{"bytes":1460,"dir":2,"interval":638},{"bytes":1460,"dir":2,"interval":0},{"bytes":999,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":1463},{"bytes":1460,"dir":2,"interval":1470},{"bytes":1460,"dir":2,"interval":0},{"bytes":74,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":185,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":160},{"bytes":1460,"dir":2,"interval":154},{"bytes":1460,"dir":2,"interval":0},{"bytes":1054,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":1947},{"bytes":1460,"dir":2,"interval":1947},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":3086},{"bytes":1460,"dir":2,"interval":3089},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":459,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":609,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31750}],"tls":{"version":"tls1.2","sni":"p3-dy.byteimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50382,"dip":"27.221.59.197","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":5815,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":35148,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":14},{"bytes":126,"dir":1,"interval":993},{"bytes":268,"dir":1,"interval":439},{"bytes":1460,"dir":2,"interval":1166},{"bytes":1325,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32503}],"tls":{"version":"tls1.2","sni":"p3.pstatp.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58771,"dip":"101.75.228.67","dport":443,"proto":"tcp","c2s_bytes":919,"s2c_bytes":3780,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":60211,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":16},{"bytes":118,"dir":1,"interval":221},{"bytes":589,"dir":1,"interval":0},{"bytes":638,"dir":2,"interval":76},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":59972}],"tls":{"version":"tls1.2","sni":"aweme-swan-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50400,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":2967,"s2c_bytes":8842,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30303,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":3},{"bytes":258,"dir":2,"interval":13},{"bytes":73,"dir":2,"interval":0},{"bytes":470,"dir":1,"interval":291},{"bytes":1440,"dir":1,"interval":3},{"bytes":540,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30072}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50408,"dip":"110.75.134.2","dport":443,"proto":"tcp","c2s_bytes":893,"s2c_bytes":7000,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":618,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1241,"dir":2,"interval":12},{"bytes":298,"dir":2,"interval":34},{"bytes":376,"dir":1,"interval":536},{"bytes":1365,"dir":2,"interval":296}],"tls":{"version":"tls1.2","sni":"mdap.alipay.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50409,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1741,"s2c_bytes":274149,"c2s_pkts":5,"s2c_pkts":195,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":12},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":1185},{"bytes":58,"dir":1,"interval":11},{"bytes":319,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":285},{"bytes":68,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1095,"dir":2,"interval":0},{"bytes":324,"dir":1,"interval":2070},{"bytes":1460,"dir":2,"interval":2065},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":692,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"zres.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58834,"dip":"17.57.145.84","dport":443,"proto":"tcp","c2s_bytes":222,"s2c_bytes":3431,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":18073,"packets":[{"bytes":222,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1399,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"courier.push.apple.com","alpn":"\u0010apns-security-v3\fapns-pack-v1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,16,5,18,23]}}
{"sip":"192.168.50.193","sport":50425,"dip":"106.11.129.144","dport":443,"proto":"tcp","c2s_bytes":1796,"s2c_bytes":8867,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":973,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1019,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42},{"bytes":1279,"dir":1,"interval":933},{"bytes":299,"dir":2,"interval":297},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ifsk2.tanx.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50430,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":1044,"s2c_bytes":4830,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":229,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":171},{"bytes":53,"dir":1,"interval":30},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":187,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":77},{"bytes":692,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":7},{"bytes":31,"dir":1,"interval":18}],"tls":{"version":"tls1.2","sni":"h5.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50429,"dip":"106.11.129.144","dport":443,"proto":"tcp","c2s_bytes":1798,"s2c_bytes":8854,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":862,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1006,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":1281,"dir":1,"interval":821},{"bytes":299,"dir":2,"interval":184},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ifsk2.tanx.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50428,"dip":"106.11.129.144","dport":443,"proto":"tcp","c2s_bytes":1794,"s2c_bytes":8852,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":899,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1004,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38},{"bytes":1277,"dir":1,"interval":860},{"bytes":299,"dir":2,"interval":224},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ifsk2.tanx.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50426,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1474,"s2c_bytes":8066,"c2s_pkts":9,"s2c_pkts":10,"total_pkts":19,"duration":2519,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":713},{"bytes":58,"dir":1,"interval":15},{"bytes":46,"dir":1,"interval":4},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":197,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":65},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1044,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":8},{"bytes":24,"dir":1,"interval":1773}],"tls":{"version":"tls1.2","sni":"dtmall-tel.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50433,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4184,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1098,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58694,"dip":"222.199.191.35","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4374,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":108246,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1111,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":20},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pics0.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":50450,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1466,"s2c_bytes":39829,"c2s_pkts":9,"s2c_pkts":31,"total_pkts":40,"duration":2120,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":170},{"bytes":58,"dir":1,"interval":16},{"bytes":46,"dir":1,"interval":5},{"bytes":43,"dir":1,"interval":1},{"bytes":35,"dir":1,"interval":0},{"bytes":189,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":38},{"bytes":31,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":718,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":1921}],"tls":{"version":"tls1.2","sni":"g.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50455,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1654,"s2c_bytes":14707,"c2s_pkts":9,"s2c_pkts":14,"total_pkts":23,"duration":1955,"packets":[{"bytes":590,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":629,"dir":1,"interval":54},{"bytes":58,"dir":1,"interval":4},{"bytes":46,"dir":1,"interval":6},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":198,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":14},{"bytes":31,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":1884}],"tls":{"version":"tls1.2","sni":"dtmall-tel.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":50411,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1417,"s2c_bytes":154653,"c2s_pkts":4,"s2c_pkts":110,"total_pkts":114,"duration":22309,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":243},{"bytes":58,"dir":1,"interval":12},{"bytes":319,"dir":1,"interval":0},{"bytes":255,"dir":2,"interval":22},{"bytes":255,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":267,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dtmall-tel.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50431,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":1530,"s2c_bytes":88304,"c2s_pkts":4,"s2c_pkts":68,"total_pkts":72,"duration":16066,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":123},{"bytes":427,"dir":1,"interval":52},{"bytes":1460,"dir":2,"interval":78},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":508,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":460,"dir":1,"interval":9530},{"bytes":1460,"dir":2,"interval":9526},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":642,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":75,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1422,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":562,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":925,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1203,"dir":2,"interval":0},{"bytes":49,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"market.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50422,"dip":"106.11.93.25","dport":443,"proto":"tcp","c2s_bytes":2760,"s2c_bytes":3817,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":18597,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":295,"dir":2,"interval":9},{"bytes":274,"dir":2,"interval":24},{"bytes":399,"dir":1,"interval":976},{"bytes":392,"dir":1,"interval":0},{"bytes":164,"dir":2,"interval":256},{"bytes":400,"dir":1,"interval":12758},{"bytes":1052,"dir":1,"interval":0},{"bytes":164,"dir":2,"interval":12744}],"tls":{"version":"tls1.2","sni":"h-adashx.ut.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50421,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1407,"s2c_bytes":13665,"c2s_pkts":4,"s2c_pkts":12,"total_pkts":16,"duration":19339,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":52},{"bytes":58,"dir":1,"interval":19},{"bytes":309,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":899,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mdike.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50417,"dip":"203.119.175.228","dport":443,"proto":"tcp","c2s_bytes":8100,"s2c_bytes":32007,"c2s_pkts":11,"s2c_pkts":25,"total_pkts":36,"duration":19525,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":126,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":23},{"bytes":1440,"dir":1,"interval":958},{"bytes":105,"dir":1,"interval":0},{"bytes":1270,"dir":2,"interval":485},{"bytes":1440,"dir":1,"interval":126},{"bytes":8,"dir":1,"interval":0},{"bytes":1287,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":347},{"bytes":1429,"dir":2,"interval":44},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":89,"dir":2,"interval":2},{"bytes":1440,"dir":1,"interval":606},{"bytes":31,"dir":1,"interval":0},{"bytes":289,"dir":1,"interval":0},{"bytes":1187,"dir":2,"interval":331},{"bytes":1440,"dir":1,"interval":135},{"bytes":103,"dir":1,"interval":0},{"bytes":1383,"dir":2,"interval":136}],"tls":{"version":"tls1.2","sni":"guide-acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50453,"dip":"203.119.144.235","dport":443,"proto":"tcp","c2s_bytes":68864,"s2c_bytes":7920,"c2s_pkts":50,"s2c_pkts":8,"total_pkts":58,"duration":7416,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":32},{"bytes":1460,"dir":2,"interval":0},{"bytes":269,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":8},{"bytes":1440,"dir":1,"interval":207},{"bytes":377,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":8},{"bytes":1440,"dir":1,"interval":5},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":290,"dir":1,"interval":0},{"bytes":361,"dir":2,"interval":105}],"tls":{"version":"tls1.2","sni":"rhdc-acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50451,"dip":"144.123.31.193","dport":443,"proto":"tcp","c2s_bytes":1453,"s2c_bytes":7110,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":8965,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":209},{"bytes":58,"dir":1,"interval":25},{"bytes":255,"dir":2,"interval":33},{"bytes":255,"dir":2,"interval":0},{"bytes":355,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":184,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wwc.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50406,"dip":"203.119.169.99","dport":443,"proto":"tcp","c2s_bytes":1024,"s2c_bytes":7770,"c2s_pkts":2,"s2c_pkts":8,"total_pkts":10,"duration":23364,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":139,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":73,"dir":2,"interval":0},{"bytes":507,"dir":1,"interval":272}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50418,"dip":"203.119.175.228","dport":443,"proto":"tcp","c2s_bytes":11343,"s2c_bytes":17655,"c2s_pkts":12,"s2c_pkts":15,"total_pkts":27,"duration":19525,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":124,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":15},{"bytes":1426,"dir":1,"interval":797},{"bytes":1440,"dir":1,"interval":0},{"bytes":169,"dir":1,"interval":0},{"bytes":1367,"dir":2,"interval":446},{"bytes":1411,"dir":1,"interval":205},{"bytes":766,"dir":2,"interval":99},{"bytes":1427,"dir":1,"interval":254},{"bytes":1429,"dir":2,"interval":269},{"bytes":1193,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":113},{"bytes":94,"dir":1,"interval":0},{"bytes":1383,"dir":2,"interval":109},{"bytes":1440,"dir":1,"interval":320},{"bytes":108,"dir":1,"interval":0},{"bytes":1171,"dir":2,"interval":310},{"bytes":1440,"dir":1,"interval":109},{"bytes":431,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":179},{"bytes":1219,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"guide-acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50424,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1426,"s2c_bytes":4825,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":17622,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":569},{"bytes":58,"dir":1,"interval":120},{"bytes":328,"dir":1,"interval":0},{"bytes":819,"dir":2,"interval":389}],"tls":{"version":"tls1.2","sni":"wvcfg.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50420,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":1379,"s2c_bytes":55398,"c2s_pkts":4,"s2c_pkts":41,"total_pkts":45,"duration":19504,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":138,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":226},{"bytes":376,"dir":1,"interval":10},{"bytes":1460,"dir":2,"interval":33},{"bytes":90,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1232,"dir":2,"interval":0},{"bytes":360,"dir":1,"interval":175},{"bytes":1136,"dir":2,"interval":174}],"tls":{"version":"tls1.2","sni":"zconfig.alibabausercontent.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50457,"dip":"106.11.93.25","dport":443,"proto":"tcp","c2s_bytes":5669,"s2c_bytes":3638,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":4830,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":26},{"bytes":400,"dir":1,"interval":240},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":396,"dir":1,"interval":12},{"bytes":164,"dir":2,"interval":146}],"tls":{"version":"tls1.2","sni":"h-adashx.ut.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50427,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1430,"s2c_bytes":58467,"c2s_pkts":4,"s2c_pkts":44,"total_pkts":48,"duration":16696,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":3},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":129},{"bytes":58,"dir":1,"interval":137},{"bytes":332,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":202},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":131,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":310,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ppp.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50456,"dip":"106.11.93.25","dport":443,"proto":"tcp","c2s_bytes":2294,"s2c_bytes":3638,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":4831,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":24},{"bytes":400,"dir":1,"interval":241},{"bytes":1377,"dir":1,"interval":0},{"bytes":164,"dir":2,"interval":145}],"tls":{"version":"tls1.2","sni":"h-adashx.ut.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50414,"dip":"203.119.175.228","dport":443,"proto":"tcp","c2s_bytes":2137,"s2c_bytes":7788,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":20306,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":141,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":725},{"bytes":180,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"guide-acs.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50423,"dip":"203.119.144.235","dport":443,"proto":"tcp","c2s_bytes":57105,"s2c_bytes":7648,"c2s_pkts":43,"s2c_pkts":8,"total_pkts":51,"duration":17726,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":285,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":883},{"bytes":27,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":9},{"bytes":99,"dir":1,"interval":118},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":10},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":7},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":3},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":50},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":10},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":51},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":5},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":18},{"bytes":1440,"dir":1,"interval":81},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":35},{"bytes":1440,"dir":1,"interval":11},{"bytes":1440,"dir":1,"interval":0},{"bytes":302,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"rhdc-acs.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50415,"dip":"110.76.15.173","dport":443,"proto":"tcp","c2s_bytes":1098,"s2c_bytes":6447,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":19559,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1112,"dir":2,"interval":11},{"bytes":258,"dir":2,"interval":39},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1036},{"bytes":53,"dir":1,"interval":201},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":161,"dir":1,"interval":0},{"bytes":111,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":355},{"bytes":42,"dir":2,"interval":39},{"bytes":832,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":92}],"tls":{"version":"tls1.2","sni":"amdc.alipay.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50419,"dip":"203.119.175.228","dport":443,"proto":"tcp","c2s_bytes":8841,"s2c_bytes":43020,"c2s_pkts":12,"s2c_pkts":33,"total_pkts":45,"duration":19526,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":125,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":8},{"bytes":1440,"dir":1,"interval":958},{"bytes":394,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":607},{"bytes":1460,"dir":2,"interval":0},{"bytes":1120,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":339},{"bytes":608,"dir":1,"interval":0},{"bytes":85,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":366},{"bytes":1043,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":393},{"bytes":47,"dir":1,"interval":0},{"bytes":68,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":342},{"bytes":324,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":153},{"bytes":50,"dir":1,"interval":0},{"bytes":1312,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":437},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":55},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":900,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"guide-acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58786,"dip":"139.215.192.215","dport":443,"proto":"tcp","c2s_bytes":863,"s2c_bytes":3629,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":93924,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":18},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":106},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":384,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":85},{"bytes":429,"dir":2,"interval":50},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":144}],"tls":{"version":"tls1.2","sni":"iu-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50405,"dip":"122.14.43.165","dport":443,"proto":"tcp","c2s_bytes":17818,"s2c_bytes":3732,"c2s_pkts":15,"s2c_pkts":4,"total_pkts":19,"duration":26006,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":63},{"bytes":633,"dir":1,"interval":6},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1},{"bytes":1460,"dir":1,"interval":1},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1},{"bytes":1460,"dir":1,"interval":0},{"bytes":482,"dir":1,"interval":0},{"bytes":671,"dir":2,"interval":73}],"tls":{"version":"tls1.2","sni":"smr.snssdk.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50404,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":2962,"s2c_bytes":8812,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":26930,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":73,"dir":2,"interval":0},{"bytes":465,"dir":1,"interval":875},{"bytes":1440,"dir":1,"interval":0},{"bytes":178,"dir":1,"interval":7},{"bytes":362,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50353,"dip":"1.189.99.102","dport":443,"proto":"tcp","c2s_bytes":1156,"s2c_bytes":3928,"c2s_pkts":7,"s2c_pkts":6,"total_pkts":13,"duration":83045,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":206},{"bytes":53,"dir":1,"interval":64},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":330,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":117},{"bytes":766,"dir":2,"interval":57}],"tls":{"version":"tls1.2","sni":"is.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58779,"dip":"101.72.202.213","dport":443,"proto":"tcp","c2s_bytes":1673,"s2c_bytes":3805,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":95494,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":9},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":103},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":713,"dir":1,"interval":1},{"bytes":483,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":4},{"bytes":38,"dir":2,"interval":27},{"bytes":605,"dir":2,"interval":37},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"is3.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50402,"dip":"114.113.88.125","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":14692,"c2s_pkts":4,"s2c_pkts":12,"total_pkts":16,"duration":45232,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":166,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":132},{"bytes":286,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1397,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":16408},{"bytes":1460,"dir":2,"interval":16409},{"bytes":1460,"dir":2,"interval":0},{"bytes":1191,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58785,"dip":"124.132.134.228","dport":443,"proto":"tcp","c2s_bytes":863,"s2c_bytes":3638,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":93925,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":51},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":384,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":30},{"bytes":30,"dir":1,"interval":61},{"bytes":438,"dir":2,"interval":48},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58784,"dip":"1.189.99.100","dport":443,"proto":"tcp","c2s_bytes":862,"s2c_bytes":3896,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":94829,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":1010},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":383,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":77},{"bytes":435,"dir":2,"interval":66},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":143}],"tls":{"version":"tls1.2","sni":"api-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58782,"dip":"119.249.58.213","dport":443,"proto":"tcp","c2s_bytes":6535,"s2c_bytes":4301,"c2s_pkts":13,"s2c_pkts":10,"total_pkts":23,"duration":95475,"packets":[{"bytes":201,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":9},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":105},{"bytes":45,"dir":1,"interval":13},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":716,"dir":1,"interval":0},{"bytes":277,"dir":1,"interval":0},{"bytes":446,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":278,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":29},{"bytes":42,"dir":2,"interval":2},{"bytes":599,"dir":2,"interval":76},{"bytes":38,"dir":2,"interval":0},{"bytes":422,"dir":2,"interval":15},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mr.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58772,"dip":"124.132.134.225","dport":443,"proto":"tcp","c2s_bytes":3113,"s2c_bytes":28064,"c2s_pkts":12,"s2c_pkts":36,"total_pkts":48,"duration":95502,"packets":[{"bytes":208,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":157},{"bytes":45,"dir":1,"interval":5},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":688,"dir":1,"interval":2},{"bytes":30,"dir":1,"interval":57},{"bytes":231,"dir":1,"interval":46},{"bytes":38,"dir":2,"interval":324},{"bytes":627,"dir":2,"interval":43},{"bytes":38,"dir":2,"interval":0},{"bytes":352,"dir":2,"interval":35},{"bytes":38,"dir":2,"interval":0},{"bytes":610,"dir":1,"interval":1759},{"bytes":1460,"dir":2,"interval":2192},{"bytes":35,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":33,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":228,"dir":2,"interval":0},{"bytes":610,"dir":1,"interval":1086},{"bytes":1460,"dir":2,"interval":577},{"bytes":172,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":33,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":781,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":453,"dir":1,"interval":10830},{"bytes":38,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":10610},{"bytes":481,"dir":2,"interval":23},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"abtest-ch.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58831,"dip":"101.72.202.212","dport":443,"proto":"tcp","c2s_bytes":1411,"s2c_bytes":3808,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":45200,"packets":[{"bytes":201,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":99},{"bytes":45,"dir":1,"interval":3},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":721,"dir":1,"interval":0},{"bytes":214,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":17},{"bytes":608,"dir":2,"interval":72},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"z6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58770,"dip":"123.6.12.235","dport":443,"proto":"tcp","c2s_bytes":26024,"s2c_bytes":4986,"c2s_pkts":28,"s2c_pkts":18,"total_pkts":46,"duration":95504,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":15},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":156},{"bytes":45,"dir":1,"interval":1},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":5},{"bytes":958,"dir":1,"interval":0},{"bytes":978,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":21},{"bytes":623,"dir":2,"interval":48},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":59},{"bytes":495,"dir":1,"interval":59577},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":59596},{"bytes":42,"dir":2,"interval":13},{"bytes":1460,"dir":1,"interval":41},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":11},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":29,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":27},{"bytes":42,"dir":2,"interval":12},{"bytes":42,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":1},{"bytes":1081,"dir":1,"interval":17},{"bytes":42,"dir":2,"interval":15},{"bytes":395,"dir":2,"interval":55},{"bytes":38,"dir":2,"interval":0},{"bytes":493,"dir":1,"interval":9921},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":40},{"bytes":1146,"dir":1,"interval":0},{"bytes":394,"dir":2,"interval":9987},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"log-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58793,"dip":"101.72.206.229","dport":443,"proto":"tcp","c2s_bytes":874,"s2c_bytes":3682,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":93921,"packets":[{"bytes":211,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":11},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":632},{"bytes":45,"dir":1,"interval":10},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":5},{"bytes":30,"dir":1,"interval":0},{"bytes":388,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":24},{"bytes":221,"dir":2,"interval":27},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast3-c-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58765,"dip":"220.243.131.102","dport":443,"proto":"tcp","c2s_bytes":3222,"s2c_bytes":10037,"c2s_pkts":24,"s2c_pkts":41,"total_pkts":65,"duration":95830,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":270},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":255,"dir":1,"interval":0},{"bytes":132,"dir":1,"interval":0},{"bytes":132,"dir":1,"interval":0},{"bytes":138,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":130,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":212},{"bytes":30,"dir":1,"interval":6},{"bytes":287,"dir":2,"interval":7},{"bytes":48,"dir":2,"interval":0},{"bytes":377,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":337,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":336,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":370,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":24},{"bytes":129,"dir":1,"interval":0},{"bytes":327,"dir":2,"interval":21},{"bytes":48,"dir":2,"interval":0},{"bytes":371,"dir":2,"interval":4},{"bytes":48,"dir":2,"interval":0},{"bytes":136,"dir":1,"interval":278},{"bytes":138,"dir":1,"interval":0},{"bytes":275,"dir":2,"interval":273},{"bytes":48,"dir":2,"interval":0},{"bytes":337,"dir":2,"interval":4},{"bytes":48,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":322},{"bytes":283,"dir":2,"interval":318},{"bytes":48,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":79},{"bytes":132,"dir":1,"interval":1},{"bytes":325,"dir":2,"interval":79},{"bytes":48,"dir":2,"interval":0},{"bytes":283,"dir":2,"interval":4},{"bytes":48,"dir":2,"interval":0},{"bytes":136,"dir":1,"interval":104},{"bytes":376,"dir":2,"interval":101},{"bytes":48,"dir":2,"interval":0},{"bytes":135,"dir":1,"interval":1542},{"bytes":291,"dir":2,"interval":1542},{"bytes":48,"dir":2,"interval":0},{"bytes":140,"dir":1,"interval":1090},{"bytes":276,"dir":2,"interval":1091},{"bytes":48,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":46868},{"bytes":38,"dir":1,"interval":0},{"bytes":368,"dir":2,"interval":46870},{"bytes":48,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58783,"dip":"110.249.203.251","dport":443,"proto":"tcp","c2s_bytes":915,"s2c_bytes":3894,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":95150,"packets":[{"bytes":210,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":164,"dir":2,"interval":5},{"bytes":290,"dir":2,"interval":22},{"bytes":118,"dir":1,"interval":1438},{"bytes":587,"dir":1,"interval":36},{"bytes":520,"dir":2,"interval":1190}],"tls":{"version":"tls1.2","sni":"api-eagle-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58691,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":185,"s2c_bytes":4311,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":118406,"packets":[{"bytes":185,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":116434}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58689,"dip":"182.61.200.5","dport":443,"proto":"tcp","c2s_bytes":188,"s2c_bytes":4311,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":118424,"packets":[{"bytes":188,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":116437}],"tls":{"version":"tls1.2","sni":"feed.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":58769,"dip":"1.189.99.96","dport":443,"proto":"tcp","c2s_bytes":2110,"s2c_bytes":3815,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":120435,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":338},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":964,"dir":1,"interval":0},{"bytes":667,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":7},{"bytes":38,"dir":2,"interval":94},{"bytes":538,"dir":2,"interval":70},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":120001},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ib-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50459,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4862,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":17545,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":782,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50492,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5118,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":266,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":780,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":75}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50464,"dip":"17.248.161.172","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5167,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":17834,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1087,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-fmfmobile.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50510,"dip":"203.208.39.223","dport":443,"proto":"tcp","c2s_bytes":237,"s2c_bytes":2665,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":166,"packets":[{"bytes":237,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":38},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50518,"dip":"203.208.50.94","dport":443,"proto":"tcp","c2s_bytes":216,"s2c_bytes":3486,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":185,"packets":[{"bytes":216,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1379,"dir":2,"interval":0},{"bytes":375,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"www.googletagmanager.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50526,"dip":"60.28.125.129","dport":443,"proto":"tcp","c2s_bytes":227,"s2c_bytes":3748,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":85,"packets":[{"bytes":227,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"js.a.kspkg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50517,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":207,"s2c_bytes":8811,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":571,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50554,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":822,"s2c_bytes":286496,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":305,"dir":1,"interval":89},{"bytes":1460,"dir":2,"interval":34},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"hybrid.static.yximgs.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50541,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":8810,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":688,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50536,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":969,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50558,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":812,"s2c_bytes":286481,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":295,"dir":1,"interval":314},{"bytes":1460,"dir":2,"interval":110},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"hybrid.static.yximgs.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50556,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":817,"s2c_bytes":286481,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":300,"dir":1,"interval":414},{"bytes":1460,"dir":2,"interval":179},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"hybrid.static.yximgs.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50557,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":816,"s2c_bytes":286481,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":299,"dir":1,"interval":443},{"bytes":1460,"dir":2,"interval":208},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"hybrid.static.yximgs.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50559,"dip":"203.208.39.223","dport":443,"proto":"tcp","c2s_bytes":237,"s2c_bytes":2664,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":800,"packets":[{"bytes":237,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":863,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":37},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50493,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4861,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":17551,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":781,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50564,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1219,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50497,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3340,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17839,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50501,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3340,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17545,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50527,"dip":"34.241.118.140","dport":443,"proto":"tcp","c2s_bytes":233,"s2c_bytes":3297,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":18298,"packets":[{"bytes":233,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1265,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"events.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50533,"dip":"54.76.225.200","dport":443,"proto":"tcp","c2s_bytes":228,"s2c_bytes":3297,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":18636,"packets":[{"bytes":228,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50566,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4862,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":17930,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":782,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50511,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":1575,"s2c_bytes":3995,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":30492,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":677,"dir":1,"interval":320},{"bytes":350,"dir":1,"interval":1},{"bytes":430,"dir":2,"interval":64},{"bytes":31,"dir":1,"interval":30164}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50513,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":1282,"s2c_bytes":4222,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31081,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":388,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":691,"dir":1,"interval":339},{"bytes":43,"dir":1,"interval":0},{"bytes":672,"dir":2,"interval":73},{"bytes":31,"dir":1,"interval":30736}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50512,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":2349,"s2c_bytes":6365,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":31358,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":621,"dir":1,"interval":137},{"bytes":206,"dir":1,"interval":0},{"bytes":328,"dir":2,"interval":111},{"bytes":611,"dir":1,"interval":348},{"bytes":363,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":351},{"bytes":1024,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30869}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50514,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":1286,"s2c_bytes":3829,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31081,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":388,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":691,"dir":1,"interval":337},{"bytes":47,"dir":1,"interval":0},{"bytes":279,"dir":2,"interval":57},{"bytes":31,"dir":1,"interval":30742}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50552,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1626,"s2c_bytes":3841,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":30795,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":359,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":442},{"bytes":689,"dir":1,"interval":61},{"bytes":263,"dir":1,"interval":4},{"bytes":304,"dir":2,"interval":249},{"bytes":31,"dir":1,"interval":30271}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50522,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":1501,"s2c_bytes":3862,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":31872,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":726},{"bytes":621,"dir":1,"interval":3},{"bytes":206,"dir":1,"interval":0},{"bytes":325,"dir":2,"interval":101},{"bytes":31,"dir":1,"interval":31126}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50543,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":2495,"s2c_bytes":4073,"c2s_pkts":7,"s2c_pkts":5,"total_pkts":12,"duration":31075,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":743,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":301},{"bytes":690,"dir":1,"interval":21},{"bytes":224,"dir":1,"interval":0},{"bytes":653,"dir":2,"interval":68},{"bytes":686,"dir":1,"interval":34},{"bytes":221,"dir":1,"interval":0},{"bytes":951,"dir":2,"interval":26},{"bytes":31,"dir":1,"interval":30706}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50524,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1600,"s2c_bytes":3791,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":30780,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":427},{"bytes":627,"dir":1,"interval":60},{"bytes":299,"dir":1,"interval":0},{"bytes":239,"dir":2,"interval":226},{"bytes":31,"dir":1,"interval":30280}],"tls":{"version":"tls1.2","sni":"push.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50545,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":2465,"s2c_bytes":4167,"c2s_pkts":7,"s2c_pkts":5,"total_pkts":12,"duration":31075,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":742,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":9},{"bytes":126,"dir":1,"interval":311},{"bytes":680,"dir":1,"interval":11},{"bytes":218,"dir":1,"interval":0},{"bytes":260,"dir":2,"interval":47},{"bytes":687,"dir":1,"interval":20},{"bytes":206,"dir":1,"interval":0},{"bytes":1439,"dir":2,"interval":22},{"bytes":31,"dir":1,"interval":30720}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50542,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":2672,"s2c_bytes":3848,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":31434,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":373},{"bytes":361,"dir":1,"interval":21},{"bytes":1452,"dir":1,"interval":0},{"bytes":185,"dir":1,"interval":0},{"bytes":296,"dir":2,"interval":71},{"bytes":31,"dir":1,"interval":31034}],"tls":{"version":"tls1.2","sni":"gdfp.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50568,"dip":"120.133.135.36","dport":443,"proto":"tcp","c2s_bytes":933,"s2c_bytes":2768,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":31454,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":748,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":33},{"bytes":126,"dir":1,"interval":334},{"bytes":259,"dir":1,"interval":251},{"bytes":270,"dir":2,"interval":522},{"bytes":31,"dir":1,"interval":30860}],"tls":{"version":"tls1.2","sni":"apihn1.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50580,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3340,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17849,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50573,"dip":"120.133.135.36","dport":443,"proto":"tcp","c2s_bytes":1279,"s2c_bytes":2752,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":30274,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":748,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":35},{"bytes":126,"dir":1,"interval":155},{"bytes":605,"dir":1,"interval":4},{"bytes":270,"dir":2,"interval":74},{"bytes":31,"dir":1,"interval":30080}],"tls":{"version":"tls1.2","sni":"apihn1.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50581,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3338,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":18105,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1306,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50565,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1451,"s2c_bytes":4378,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":35313,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":184},{"bytes":259,"dir":1,"interval":262},{"bytes":270,"dir":2,"interval":438},{"bytes":259,"dir":1,"interval":3768},{"bytes":270,"dir":2,"interval":3769},{"bytes":259,"dir":1,"interval":750},{"bytes":270,"dir":2,"interval":756},{"bytes":31,"dir":1,"interval":30334}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50571,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":1451,"s2c_bytes":3308,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":31965,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":756,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":266},{"bytes":259,"dir":1,"interval":3},{"bytes":270,"dir":2,"interval":21},{"bytes":259,"dir":1,"interval":628},{"bytes":270,"dir":2,"interval":628},{"bytes":259,"dir":1,"interval":746},{"bytes":270,"dir":2,"interval":746},{"bytes":31,"dir":1,"interval":30309}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50572,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":2489,"s2c_bytes":4362,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":31669,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":243},{"bytes":605,"dir":1,"interval":7},{"bytes":270,"dir":2,"interval":35},{"bytes":605,"dir":1,"interval":291},{"bytes":270,"dir":2,"interval":291},{"bytes":605,"dir":1,"interval":765},{"bytes":270,"dir":2,"interval":765},{"bytes":31,"dir":1,"interval":30347}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50574,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1279,"s2c_bytes":3822,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31004,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":282},{"bytes":605,"dir":1,"interval":6},{"bytes":270,"dir":2,"interval":34},{"bytes":31,"dir":1,"interval":30702}],"tls":{"version":"tls1.2","sni":"upload.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50570,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":1884,"s2c_bytes":3023,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":32781,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":723},{"bytes":605,"dir":1,"interval":6},{"bytes":270,"dir":2,"interval":215},{"bytes":605,"dir":1,"interval":959},{"bytes":270,"dir":2,"interval":959},{"bytes":31,"dir":1,"interval":31081}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50575,"dip":"103.107.217.130","dport":443,"proto":"tcp","c2s_bytes":933,"s2c_bytes":3838,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":30919,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":296},{"bytes":259,"dir":1,"interval":6},{"bytes":270,"dir":2,"interval":36},{"bytes":31,"dir":1,"interval":30610}],"tls":{"version":"tls1.2","sni":"upload.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50592,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4862,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":17895,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":782,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50607,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":207,"s2c_bytes":8810,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":917,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50621,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":8811,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":1302,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50623,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":822,"s2c_bytes":286496,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":305,"dir":1,"interval":423},{"bytes":1460,"dir":2,"interval":43},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"hybrid.static.yximgs.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50648,"dip":"203.208.39.215","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":2407,"c2s_pkts":2,"s2c_pkts":2,"total_pkts":4,"duration":146,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":959,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":129}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58930,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":327,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":307,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":246}],"tls":{"version":"tls1.2","sni":"lf-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58929,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":327,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":305,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":244}],"tls":{"version":"tls1.2","sni":"lf-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50631,"dip":"17.248.161.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":252,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":66}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50653,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":876,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":30},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50657,"dip":"203.208.39.215","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":2406,"c2s_pkts":2,"s2c_pkts":2,"total_pkts":4,"duration":144,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":958,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":122}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50664,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":6780,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"i.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50662,"dip":"221.195.197.2","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":2852,"c2s_pkts":1,"s2c_pkts":2,"total_pkts":3,"duration":6873,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1392,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50663,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":13723,"c2s_pkts":1,"s2c_pkts":13,"total_pkts":14,"duration":6877,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":493,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"logs.amap.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59014,"dip":"122.14.43.27","dport":443,"proto":"tcp","c2s_bytes":203,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":7101,"packets":[{"bytes":203,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"xlog.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50606,"dip":"17.248.161.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":18559,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50605,"dip":"17.248.161.145","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4861,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":19112,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50654,"dip":"23.23.183.216","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5869,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":10443,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":325,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"e.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50616,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":2297,"s2c_bytes":4583,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":15976,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":396,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":892,"dir":1,"interval":794},{"bytes":313,"dir":2,"interval":629},{"bytes":682,"dir":1,"interval":1118},{"bytes":206,"dir":1,"interval":0},{"bytes":720,"dir":2,"interval":1117}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50632,"dip":"17.248.161.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":10092,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50658,"dip":"17.248.161.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":8537,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50660,"dip":"31.13.80.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3702,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":6954,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":222,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58914,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":206,"s2c_bytes":3189,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":10753,"packets":[{"bytes":206,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1386,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"a6-ipv6.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50614,"dip":"34.241.118.140","dport":443,"proto":"tcp","c2s_bytes":233,"s2c_bytes":3297,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":16099,"packets":[{"bytes":233,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1265,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"events.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50617,"dip":"54.76.225.200","dport":443,"proto":"tcp","c2s_bytes":228,"s2c_bytes":3297,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":15980,"packets":[{"bytes":228,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58915,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":201,"s2c_bytes":3173,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":10753,"packets":[{"bytes":201,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1386,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"a6.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50627,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":1255,"s2c_bytes":3829,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":14052,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":388,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":691,"dir":1,"interval":378},{"bytes":47,"dir":1,"interval":0},{"bytes":279,"dir":2,"interval":126}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50624,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":1251,"s2c_bytes":4237,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":14370,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":691,"dir":1,"interval":290},{"bytes":43,"dir":1,"interval":14},{"bytes":672,"dir":2,"interval":53}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50661,"dip":"203.119.244.220","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3073,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":6891,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1363,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"restapi.amap.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50652,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":2896,"s2c_bytes":8811,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":10167,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":460,"dir":1,"interval":433},{"bytes":1440,"dir":1,"interval":4},{"bytes":479,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59019,"dip":"122.14.43.27","dport":443,"proto":"tcp","c2s_bytes":203,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":2094,"packets":[{"bytes":203,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"xlog.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59043,"dip":"221.194.149.1","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4137,"packets":[{"bytes":212,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"sf6-ttcdn-tos.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59042,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4147,"packets":[{"bytes":212,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"sf1-ttcdn-tos.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59041,"dip":"122.14.230.138","dport":443,"proto":"tcp","c2s_bytes":203,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4165,"packets":[{"bytes":203,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"gini.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50666,"dip":"122.14.43.40","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":5119,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"effect.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50665,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":6030,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"learning.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58913,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":319,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":10781,"packets":[{"bytes":201,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":282}],"tls":{"version":"tls1.2","sni":"a3.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58926,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":10728,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":497}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58925,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":10742,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":504}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58922,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":10727,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":598}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58923,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":10727,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":538}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58927,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":10743,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":710}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":58933,"dip":"122.14.43.41","dport":443,"proto":"tcp","c2s_bytes":322,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":10495,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":457}],"tls":{"version":"tls1.2","sni":"ib-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58917,"dip":"122.14.43.41","dport":443,"proto":"tcp","c2s_bytes":328,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":10762,"packets":[{"bytes":210,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":263}],"tls":{"version":"tls1.2","sni":"log-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58934,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":327,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":10495,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":456}],"tls":{"version":"tls1.2","sni":"lf-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58932,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":2478,"s2c_bytes":4111,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":10746,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":118,"dir":1,"interval":244},{"bytes":1460,"dir":1,"interval":61},{"bytes":693,"dir":1,"interval":0},{"bytes":1016,"dir":2,"interval":288},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ichannel.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58919,"dip":"122.14.43.41","dport":443,"proto":"tcp","c2s_bytes":328,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":10762,"packets":[{"bytes":210,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":262}],"tls":{"version":"tls1.2","sni":"log-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59022,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":3199,"s2c_bytes":7581,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":7112,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":118,"dir":1,"interval":150},{"bytes":1460,"dir":1,"interval":24},{"bytes":1412,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":85},{"bytes":1460,"dir":2,"interval":0},{"bytes":1303,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast-hl.ixigua.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59023,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":3174,"s2c_bytes":6674,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":7113,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":118,"dir":1,"interval":153},{"bytes":1460,"dir":1,"interval":22},{"bytes":1387,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":396,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast-hl.ixigua.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59005,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":4115,"s2c_bytes":4684,"c2s_pkts":12,"s2c_pkts":11,"total_pkts":23,"duration":7816,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":65},{"bytes":45,"dir":1,"interval":7},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":15},{"bytes":737,"dir":1,"interval":5},{"bytes":30,"dir":1,"interval":1},{"bytes":457,"dir":2,"interval":131},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":192},{"bytes":105,"dir":1,"interval":0},{"bytes":281,"dir":1,"interval":0},{"bytes":913,"dir":1,"interval":16},{"bytes":135,"dir":1,"interval":0},{"bytes":485,"dir":2,"interval":178},{"bytes":38,"dir":2,"interval":0},{"bytes":466,"dir":2,"interval":5},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"is-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58940,"dip":"122.14.43.42","dport":443,"proto":"tcp","c2s_bytes":2570,"s2c_bytes":3806,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":9844,"packets":[{"bytes":210,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":12},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":197},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":1},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":625,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":59},{"bytes":606,"dir":2,"interval":28},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":97}],"tls":{"version":"tls1.2","sni":"security-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58938,"dip":"122.14.43.168","dport":443,"proto":"tcp","c2s_bytes":6900,"s2c_bytes":7125,"c2s_pkts":13,"s2c_pkts":13,"total_pkts":26,"duration":9958,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":132},{"bytes":45,"dir":1,"interval":6},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":26},{"bytes":1366,"dir":1,"interval":9},{"bytes":30,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":131},{"bytes":1460,"dir":2,"interval":0},{"bytes":72,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":415},{"bytes":76,"dir":1,"interval":0},{"bytes":1127,"dir":1,"interval":12},{"bytes":428,"dir":2,"interval":350},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":2038},{"bytes":321,"dir":1,"interval":0},{"bytes":611,"dir":1,"interval":0},{"bytes":429,"dir":2,"interval":2038},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ic-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58921,"dip":"122.14.43.43","dport":443,"proto":"tcp","c2s_bytes":4209,"s2c_bytes":5520,"c2s_pkts":11,"s2c_pkts":11,"total_pkts":22,"duration":10772,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":12},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":250},{"bytes":45,"dir":1,"interval":72},{"bytes":48,"dir":1,"interval":15},{"bytes":34,"dir":1,"interval":0},{"bytes":1381,"dir":1,"interval":0},{"bytes":910,"dir":1,"interval":0},{"bytes":229,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":276},{"bytes":617,"dir":2,"interval":33},{"bytes":38,"dir":2,"interval":0},{"bytes":414,"dir":2,"interval":4},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":222},{"bytes":1036,"dir":1,"interval":314},{"bytes":1213,"dir":2,"interval":541},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ib-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58920,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":2030,"s2c_bytes":6179,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":10783,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":260},{"bytes":45,"dir":1,"interval":61},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":259},{"bytes":1353,"dir":1,"interval":1},{"bytes":200,"dir":1,"interval":0},{"bytes":1262,"dir":2,"interval":38},{"bytes":1434,"dir":2,"interval":0},{"bytes":283,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":199}],"tls":{"version":"tls1.2","sni":"jsb.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58916,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":5013,"s2c_bytes":25831,"c2s_pkts":11,"s2c_pkts":28,"total_pkts":39,"duration":10803,"packets":[{"bytes":206,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":279},{"bytes":45,"dir":1,"interval":1372},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":1589},{"bytes":30,"dir":1,"interval":2},{"bytes":1059,"dir":1,"interval":0},{"bytes":854,"dir":1,"interval":0},{"bytes":853,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":959,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":553,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1372,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":913,"dir":1,"interval":883},{"bytes":853,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":880},{"bytes":861,"dir":2,"interval":0},{"bytes":1156,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":730,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":788,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"a3-ipv6.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58936,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":3545,"s2c_bytes":6009,"c2s_pkts":9,"s2c_pkts":10,"total_pkts":19,"duration":10261,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":285},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":77},{"bytes":1313,"dir":1,"interval":6},{"bytes":30,"dir":1,"interval":13},{"bytes":1460,"dir":2,"interval":99},{"bytes":724,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":2449},{"bytes":294,"dir":1,"interval":0},{"bytes":587,"dir":2,"interval":2392},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"i-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58928,"dip":"111.13.210.229","dport":443,"proto":"tcp","c2s_bytes":1257,"s2c_bytes":6213,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":10750,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":227},{"bytes":45,"dir":1,"interval":60},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":228},{"bytes":777,"dir":1,"interval":12},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":0},{"bytes":90,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":238}],"tls":{"version":"tls1.2","sni":"dm-hl.toutiao.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58918,"dip":"122.14.43.41","dport":443,"proto":"tcp","c2s_bytes":6587,"s2c_bytes":5531,"c2s_pkts":12,"s2c_pkts":11,"total_pkts":23,"duration":10784,"packets":[{"bytes":210,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":262},{"bytes":45,"dir":1,"interval":60},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":250},{"bytes":1409,"dir":1,"interval":12},{"bytes":918,"dir":1,"interval":0},{"bytes":921,"dir":1,"interval":0},{"bytes":738,"dir":1,"interval":0},{"bytes":738,"dir":1,"interval":0},{"bytes":1378,"dir":1,"interval":0},{"bytes":705,"dir":2,"interval":69},{"bytes":38,"dir":2,"interval":0},{"bytes":1034,"dir":2,"interval":20},{"bytes":38,"dir":2,"interval":0},{"bytes":516,"dir":2,"interval":16},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":238}],"tls":{"version":"tls1.2","sni":"log-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58937,"dip":"122.14.43.167","dport":443,"proto":"tcp","c2s_bytes":717,"s2c_bytes":3124,"c2s_pkts":6,"s2c_pkts":4,"total_pkts":10,"duration":9980,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":662},{"bytes":45,"dir":1,"interval":9317},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lf-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50640,"dip":"120.133.135.36","dport":443,"proto":"tcp","c2s_bytes":1279,"s2c_bytes":2753,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":11731,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":749,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":35},{"bytes":126,"dir":1,"interval":305},{"bytes":605,"dir":1,"interval":9},{"bytes":270,"dir":2,"interval":63},{"bytes":31,"dir":1,"interval":11413}],"tls":{"version":"tls1.2","sni":"apihn1.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50630,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":1451,"s2c_bytes":3309,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":12994,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":10},{"bytes":126,"dir":1,"interval":661},{"bytes":259,"dir":1,"interval":3},{"bytes":270,"dir":2,"interval":72},{"bytes":259,"dir":1,"interval":2244},{"bytes":270,"dir":2,"interval":2243},{"bytes":259,"dir":1,"interval":1110},{"bytes":270,"dir":2,"interval":1113},{"bytes":31,"dir":1,"interval":8974}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50635,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":1884,"s2c_bytes":3023,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":12269,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":413},{"bytes":605,"dir":1,"interval":7},{"bytes":270,"dir":2,"interval":26},{"bytes":605,"dir":1,"interval":1835},{"bytes":270,"dir":2,"interval":1835},{"bytes":31,"dir":1,"interval":10001}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50628,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1451,"s2c_bytes":4378,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":14044,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":449},{"bytes":259,"dir":1,"interval":4},{"bytes":270,"dir":2,"interval":88},{"bytes":259,"dir":1,"interval":2803},{"bytes":270,"dir":2,"interval":2805},{"bytes":259,"dir":1,"interval":1768},{"bytes":270,"dir":2,"interval":1767},{"bytes":31,"dir":1,"interval":9006}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50544,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":10944,"s2c_bytes":6607,"c2s_pkts":21,"s2c_pkts":12,"total_pkts":33,"duration":57754,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":743,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":300},{"bytes":686,"dir":1,"interval":14},{"bytes":206,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":55},{"bytes":272,"dir":2,"interval":0},{"bytes":683,"dir":1,"interval":24},{"bytes":206,"dir":1,"interval":0},{"bytes":668,"dir":2,"interval":31},{"bytes":698,"dir":1,"interval":390},{"bytes":532,"dir":1,"interval":0},{"bytes":311,"dir":2,"interval":381},{"bytes":707,"dir":1,"interval":2991},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":193,"dir":1,"interval":0},{"bytes":293,"dir":2,"interval":2990},{"bytes":690,"dir":1,"interval":13804},{"bytes":234,"dir":1,"interval":0},{"bytes":292,"dir":2,"interval":13808},{"bytes":690,"dir":1,"interval":12884},{"bytes":234,"dir":1,"interval":2},{"bytes":290,"dir":2,"interval":12892},{"bytes":682,"dir":1,"interval":5174},{"bytes":895,"dir":1,"interval":0},{"bytes":263,"dir":2,"interval":5193},{"bytes":680,"dir":1,"interval":5829},{"bytes":206,"dir":1,"interval":0},{"bytes":297,"dir":2,"interval":5804},{"bytes":31,"dir":1,"interval":16312}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50535,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":18600,"s2c_bytes":71153,"c2s_pkts":39,"s2c_pkts":61,"total_pkts":100,"duration":58147,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":14},{"bytes":126,"dir":1,"interval":368},{"bytes":617,"dir":1,"interval":5},{"bytes":206,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":49},{"bytes":682,"dir":1,"interval":49},{"bytes":892,"dir":1,"interval":0},{"bytes":263,"dir":2,"interval":75},{"bytes":688,"dir":1,"interval":61},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":121},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":700,"dir":2,"interval":0},{"bytes":690,"dir":1,"interval":148},{"bytes":234,"dir":1,"interval":0},{"bytes":292,"dir":2,"interval":50},{"bytes":720,"dir":1,"interval":21},{"bytes":273,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":389},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":89,"dir":2,"interval":0},{"bytes":696,"dir":1,"interval":3455},{"bytes":457,"dir":1,"interval":0},{"bytes":311,"dir":2,"interval":3085},{"bytes":688,"dir":1,"interval":13801},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":13865},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":1654},{"bytes":234,"dir":1,"interval":5},{"bytes":1452,"dir":2,"interval":1661},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":698,"dir":2,"interval":0},{"bytes":696,"dir":1,"interval":4914},{"bytes":691,"dir":1,"interval":0},{"bytes":311,"dir":2,"interval":4846},{"bytes":688,"dir":1,"interval":6316},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":6379},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":804},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":803},{"bytes":1452,"dir":2,"interval":0},{"bytes":984,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":377},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":390},{"bytes":1452,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":553},{"bytes":234,"dir":1,"interval":77},{"bytes":1452,"dir":2,"interval":605},{"bytes":1120,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":3345},{"bytes":234,"dir":1,"interval":5},{"bytes":1452,"dir":2,"interval":3373},{"bytes":1452,"dir":2,"interval":0},{"bytes":915,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":1344},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":1371},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":317,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":845},{"bytes":234,"dir":1,"interval":-138},{"bytes":1452,"dir":2,"interval":788},{"bytes":1374,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":570},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":593},{"bytes":1452,"dir":2,"interval":0},{"bytes":1444,"dir":2,"interval":0},{"bytes":724,"dir":1,"interval":3212},{"bytes":206,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":3099},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":5},{"bytes":1452,"dir":2,"interval":0},{"bytes":624,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":16324}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50610,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1572,"s2c_bytes":3864,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":16307,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":359,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":8},{"bytes":126,"dir":1,"interval":307},{"bytes":692,"dir":1,"interval":4},{"bytes":206,"dir":1,"interval":0},{"bytes":327,"dir":2,"interval":26},{"bytes":31,"dir":1,"interval":15967}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50668,"dip":"203.119.244.220","dport":443,"proto":"tcp","c2s_bytes":1719,"s2c_bytes":3830,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":84,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1392,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":21},{"bytes":51,"dir":2,"interval":20},{"bytes":427,"dir":1,"interval":14},{"bytes":618,"dir":1,"interval":0},{"bytes":904,"dir":2,"interval":16},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":48}],"tls":{"version":"tls1.2","sni":"restapi.amap.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50677,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":285129,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":10},{"bytes":43,"dir":2,"interval":8},{"bytes":276,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1269,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50671,"dip":"221.195.197.2","dport":443,"proto":"tcp","c2s_bytes":982,"s2c_bytes":156183,"c2s_pkts":4,"s2c_pkts":108,"total_pkts":112,"duration":554,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":81},{"bytes":51,"dir":2,"interval":64},{"bytes":308,"dir":1,"interval":29},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":159}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50678,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":285939,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":42},{"bytes":43,"dir":2,"interval":38},{"bytes":276,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1269,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50682,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":901,"s2c_bytes":265986,"c2s_pkts":4,"s2c_pkts":184,"total_pkts":188,"duration":284,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":22},{"bytes":43,"dir":2,"interval":19},{"bytes":276,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":296,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":257}],"tls":{"version":"tls1.2","sni":"lf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50683,"dip":"221.195.197.1","dport":443,"proto":"tcp","c2s_bytes":958,"s2c_bytes":210599,"c2s_pkts":4,"s2c_pkts":146,"total_pkts":150,"duration":324,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":52},{"bytes":51,"dir":2,"interval":33},{"bytes":284,"dir":1,"interval":33},{"bytes":1460,"dir":2,"interval":34},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":348,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":222}],"tls":{"version":"tls1.2","sni":"sf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50684,"dip":"221.195.197.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":285417,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":129},{"bytes":51,"dir":2,"interval":36},{"bytes":284,"dir":1,"interval":16},{"bytes":1460,"dir":2,"interval":122},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":706,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50685,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":286130,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":12},{"bytes":43,"dir":2,"interval":9},{"bytes":276,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":50},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"sf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50686,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":21},{"bytes":51,"dir":2,"interval":17},{"bytes":284,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":129},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58931,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":26240,"s2c_bytes":110205,"c2s_pkts":32,"s2c_pkts":141,"total_pkts":173,"duration":14095,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":245},{"bytes":45,"dir":1,"interval":57},{"bytes":48,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":244},{"bytes":34,"dir":1,"interval":3},{"bytes":1402,"dir":1,"interval":0},{"bytes":1404,"dir":1,"interval":0},{"bytes":1053,"dir":1,"interval":0},{"bytes":824,"dir":1,"interval":0},{"bytes":1034,"dir":1,"interval":0},{"bytes":1344,"dir":1,"interval":27},{"bytes":1460,"dir":2,"interval":104},{"bytes":612,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1082,"dir":2,"interval":12},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":395,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":619,"dir":2,"interval":0},{"bytes":675,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":361,"dir":2,"interval":0},{"bytes":78,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":26,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":135,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":172},{"bytes":724,"dir":2,"interval":59},{"bytes":38,"dir":2,"interval":0},{"bytes":891,"dir":1,"interval":283},{"bytes":899,"dir":1,"interval":0},{"bytes":901,"dir":1,"interval":0},{"bytes":880,"dir":1,"interval":0},{"bytes":497,"dir":2,"interval":285},{"bytes":38,"dir":2,"interval":0},{"bytes":579,"dir":2,"interval":11},{"bytes":38,"dir":2,"interval":0},{"bytes":553,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1341,"dir":2,"interval":4},{"bytes":794,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":892,"dir":1,"interval":81},{"bytes":848,"dir":1,"interval":1},{"bytes":850,"dir":1,"interval":0},{"bytes":482,"dir":2,"interval":54},{"bytes":38,"dir":2,"interval":0},{"bytes":489,"dir":2,"interval":8},{"bytes":38,"dir":2,"interval":0},{"bytes":564,"dir":2,"interval":12},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":222},{"bytes":1460,"dir":2,"interval":0},{"bytes":902,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1451,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1451,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":3,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":4,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":556},{"bytes":631,"dir":1,"interval":1},{"bytes":626,"dir":1,"interval":535},{"bytes":448,"dir":2,"interval":880},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":115},{"bytes":955,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":18,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":4,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":7,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":18,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":4,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":6,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1418,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":1056},{"bytes":706,"dir":1,"interval":0},{"bytes":602,"dir":2,"interval":917},{"bytes":38,"dir":2,"interval":0},{"bytes":872,"dir":1,"interval":247},{"bytes":960,"dir":1,"interval":0},{"bytes":842,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":236},{"bytes":745,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":537,"dir":2,"interval":20},{"bytes":38,"dir":2,"interval":0},{"bytes":507,"dir":2,"interval":28},{"bytes":38,"dir":2,"interval":0},{"bytes":1011,"dir":1,"interval":152},{"bytes":1032,"dir":1,"interval":0},{"bytes":1269,"dir":1,"interval":0},{"bytes":386,"dir":2,"interval":117},{"bytes":38,"dir":2,"interval":0},{"bytes":783,"dir":1,"interval":205},{"bytes":884,"dir":2,"interval":199},{"bytes":38,"dir":2,"interval":0},{"bytes":699,"dir":2,"interval":24},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":661},{"bytes":792,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1366,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":18,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1458,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1458,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":18,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1296,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":882,"dir":1,"interval":5029}],"tls":{"version":"tls1.2","sni":"lf-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59024,"dip":"122.14.43.37","dport":443,"proto":"tcp","c2s_bytes":7922,"s2c_bytes":4145,"c2s_pkts":14,"s2c_pkts":9,"total_pkts":23,"duration":10989,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":174},{"bytes":45,"dir":1,"interval":1},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":288,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":31},{"bytes":30,"dir":1,"interval":20},{"bytes":855,"dir":2,"interval":27},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":967,"dir":1,"interval":97},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":46,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":92},{"bytes":580,"dir":1,"interval":1563},{"bytes":1219,"dir":1,"interval":3}],"tls":{"version":"tls1.2","sni":"mon-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50687,"dip":"60.215.125.102","dport":443,"proto":"tcp","c2s_bytes":926,"s2c_bytes":3729,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":780,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":237},{"bytes":43,"dir":2,"interval":303},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":440},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":2},{"bytes":150,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":2},{"bytes":30,"dir":2,"interval":338},{"bytes":724,"dir":2,"interval":3},{"bytes":30,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":66}],"tls":{"version":"tls1.2","sni":"sf3-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50688,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":285939,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":25},{"bytes":43,"dir":2,"interval":22},{"bytes":276,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1269,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":65},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":50},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50675,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":7354,"s2c_bytes":8450,"c2s_pkts":18,"s2c_pkts":17,"total_pkts":35,"duration":5961,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":78},{"bytes":43,"dir":2,"interval":72},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":20},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":247,"dir":1,"interval":0},{"bytes":66,"dir":1,"interval":0},{"bytes":66,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":20},{"bytes":1126,"dir":2,"interval":34},{"bytes":30,"dir":2,"interval":0},{"bytes":941,"dir":2,"interval":9},{"bytes":30,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":34},{"bytes":30,"dir":2,"interval":0},{"bytes":884,"dir":1,"interval":316},{"bytes":926,"dir":2,"interval":272},{"bytes":30,"dir":2,"interval":0},{"bytes":1277,"dir":1,"interval":370},{"bytes":1460,"dir":1,"interval":1},{"bytes":41,"dir":1,"interval":0},{"bytes":459,"dir":2,"interval":371},{"bytes":261,"dir":2,"interval":10},{"bytes":136,"dir":1,"interval":67},{"bytes":297,"dir":2,"interval":61},{"bytes":83,"dir":1,"interval":62},{"bytes":1460,"dir":1,"interval":47},{"bytes":588,"dir":1,"interval":29},{"bytes":293,"dir":1,"interval":0},{"bytes":416,"dir":2,"interval":138}],"tls":{"version":"tls1.2","sni":"i.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50674,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":2329,"s2c_bytes":4170,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":5961,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":78},{"bytes":43,"dir":2,"interval":71},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":20},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":116,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":22},{"bytes":1125,"dir":2,"interval":38},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"learning.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50689,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":958,"s2c_bytes":131750,"c2s_pkts":4,"s2c_pkts":92,"total_pkts":96,"duration":320,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":19},{"bytes":51,"dir":2,"interval":16},{"bytes":284,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":41},{"bytes":1460,"dir":2,"interval":63},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":339,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":287}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50690,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":285132,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":13},{"bytes":43,"dir":2,"interval":10},{"bytes":276,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1293,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":629,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":47},{"bytes":1460,"dir":2,"interval":45},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50691,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":24},{"bytes":51,"dir":2,"interval":20},{"bytes":284,"dir":1,"interval":23},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":58},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":41},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50692,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":285938,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":19},{"bytes":43,"dir":2,"interval":16},{"bytes":276,"dir":1,"interval":14},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1268,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50694,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":26},{"bytes":51,"dir":2,"interval":22},{"bytes":284,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":52},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50695,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":20},{"bytes":51,"dir":2,"interval":16},{"bytes":284,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":59},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50696,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":285940,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":17},{"bytes":43,"dir":2,"interval":15},{"bytes":276,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1270,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":44},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50697,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":16},{"bytes":51,"dir":2,"interval":13},{"bytes":284,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":45},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50698,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":286130,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":12},{"bytes":43,"dir":2,"interval":9},{"bytes":276,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":43},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50699,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":958,"s2c_bytes":162658,"c2s_pkts":4,"s2c_pkts":113,"total_pkts":117,"duration":155,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":17},{"bytes":51,"dir":2,"interval":14},{"bytes":284,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":587,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":124}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50700,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":958,"s2c_bytes":284266,"c2s_pkts":4,"s2c_pkts":196,"total_pkts":200,"duration":295,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":16},{"bytes":51,"dir":2,"interval":13},{"bytes":284,"dir":1,"interval":20},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":54},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1015,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":253}],"tls":{"version":"tls1.2","sni":"sf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50701,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":26},{"bytes":51,"dir":2,"interval":21},{"bytes":284,"dir":1,"interval":24},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":55},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50673,"dip":"17.248.161.41","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":6356,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":17687,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":228,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":222}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50670,"dip":"23.23.183.216","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":5869,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":17972,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":325,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":522}],"tls":{"version":"tls1.2","sni":"e.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50680,"dip":"104.124.232.195","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":4037,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":17627,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":169}],"tls":{"version":"tls1.2","sni":"xp.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50704,"dip":"17.248.161.176","dport":443,"proto":"tcp","c2s_bytes":1287,"s2c_bytes":6407,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":17776,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":228,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":218},{"bytes":51,"dir":2,"interval":142},{"bytes":646,"dir":1,"interval":114},{"bytes":31,"dir":1,"interval":17443}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50719,"dip":"23.23.183.216","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":5869,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":18046,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":557}],"tls":{"version":"tls1.2","sni":"e.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50722,"dip":"50.16.220.169","dport":443,"proto":"tcp","c2s_bytes":194,"s2c_bytes":7,"c2s_pkts":1,"s2c_pkts":1,"total_pkts":2,"duration":495,"packets":[{"bytes":194,"dir":1,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"e.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50712,"dip":"104.124.232.195","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":4037,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":17898,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":545,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":182}],"tls":{"version":"tls1.2","sni":"xp.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50724,"dip":"104.124.232.195","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":7,"c2s_pkts":1,"s2c_pkts":1,"total_pkts":2,"duration":120,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"xp.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50721,"dip":"17.248.161.144","dport":443,"proto":"tcp","c2s_bytes":965,"s2c_bytes":145,"c2s_pkts":4,"s2c_pkts":1,"total_pkts":5,"duration":18210,"packets":[{"bytes":237,"dir":1,"interval":0},{"bytes":145,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":151},{"bytes":646,"dir":1,"interval":4},{"bytes":31,"dir":1,"interval":18054}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,11,10]}}
{"sip":"192.168.50.193","sport":50723,"dip":"50.16.220.169","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":5869,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":18007,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":545}],"tls":{"version":"tls1.2","sni":"e.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59069,"dip":"61.149.11.113","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":3108,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":55459,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":9},{"bytes":234,"dir":2,"interval":6},{"bytes":61,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"a3-ipv6.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59068,"dip":"61.149.11.113","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":3108,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":55461,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":10},{"bytes":234,"dir":2,"interval":7},{"bytes":61,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"a3-ipv6.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59050,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":56997,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":2},{"bytes":93,"dir":1,"interval":34},{"bytes":274,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59057,"dip":"119.249.48.221","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":3108,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":56996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":33},{"bytes":234,"dir":2,"interval":31},{"bytes":61,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59051,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":56996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":2},{"bytes":93,"dir":1,"interval":33},{"bytes":274,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59052,"dip":"139.215.192.214","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":3108,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":56996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":33},{"bytes":234,"dir":2,"interval":31},{"bytes":61,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mon-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59053,"dip":"139.215.192.214","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":3108,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":56994,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":33},{"bytes":234,"dir":2,"interval":31},{"bytes":61,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mon-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59047,"dip":"139.215.192.217","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":3371,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":56996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":156,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":194},{"bytes":234,"dir":2,"interval":73},{"bytes":61,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast3-hl.ixigua.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59048,"dip":"139.215.192.217","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":3371,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":56996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":156,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":260},{"bytes":234,"dir":2,"interval":70},{"bytes":61,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast3-hl.ixigua.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50745,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":984,"s2c_bytes":249081,"c2s_pkts":4,"s2c_pkts":172,"total_pkts":176,"duration":896,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":44},{"bytes":51,"dir":2,"interval":40},{"bytes":310,"dir":1,"interval":29},{"bytes":1460,"dir":2,"interval":32},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":870,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":818}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50746,"dip":"60.215.125.102","dport":443,"proto":"tcp","c2s_bytes":977,"s2c_bytes":247280,"c2s_pkts":9,"s2c_pkts":174,"total_pkts":183,"duration":785,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":84},{"bytes":43,"dir":2,"interval":58},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":43},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":167,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":1},{"bytes":1080,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":45},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":963,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":127},{"bytes":1460,"dir":2,"interval":61},{"bytes":540,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":142},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":43},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":59},{"bytes":1460,"dir":2,"interval":0},{"bytes":822,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":506}],"tls":{"version":"tls1.2","sni":"sf3-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50748,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":916,"s2c_bytes":178930,"c2s_pkts":4,"s2c_pkts":124,"total_pkts":128,"duration":407,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":19},{"bytes":43,"dir":2,"interval":17},{"bytes":291,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1267,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":63},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1033,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":382}],"tls":{"version":"tls1.2","sni":"sf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50749,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":900,"s2c_bytes":285937,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":14},{"bytes":43,"dir":2,"interval":11},{"bytes":298,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1267,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":51},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":46},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"sf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59060,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":792,"s2c_bytes":3728,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":60039,"packets":[{"bytes":218,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":27},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":250,"dir":2,"interval":26},{"bytes":61,"dir":2,"interval":0},{"bytes":298,"dir":1,"interval":2},{"bytes":30,"dir":2,"interval":1},{"bytes":513,"dir":2,"interval":2},{"bytes":30,"dir":1,"interval":12},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":60000},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf1-ttcdn-tos.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c013","0033","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50669,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":3224,"s2c_bytes":9242,"c2s_pkts":7,"s2c_pkts":12,"total_pkts":19,"duration":60116,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1370,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":34},{"bytes":51,"dir":2,"interval":32},{"bytes":73,"dir":2,"interval":0},{"bytes":578,"dir":1,"interval":47},{"bytes":1440,"dir":1,"interval":1},{"bytes":487,"dir":1,"interval":0},{"bytes":542,"dir":2,"interval":52},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":27},{"bytes":31,"dir":2,"interval":60000},{"bytes":31,"dir":1,"interval":60004}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50676,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":3061,"s2c_bytes":34070,"c2s_pkts":9,"s2c_pkts":31,"total_pkts":40,"duration":60466,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":54},{"bytes":43,"dir":2,"interval":51},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":140},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1024,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":139},{"bytes":1460,"dir":2,"interval":2},{"bytes":1158,"dir":2,"interval":0},{"bytes":1374,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1016,"dir":2,"interval":0},{"bytes":1261,"dir":1,"interval":155},{"bytes":1460,"dir":2,"interval":193},{"bytes":446,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60003},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60115}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50751,"dip":"60.215.125.103","dport":443,"proto":"tcp","c2s_bytes":982,"s2c_bytes":237406,"c2s_pkts":9,"s2c_pkts":167,"total_pkts":176,"duration":898,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":76},{"bytes":43,"dir":2,"interval":202},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":199},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":172,"dir":1,"interval":1},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":46},{"bytes":1460,"dir":2,"interval":0},{"bytes":1080,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":65},{"bytes":1460,"dir":2,"interval":60},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":962,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":141},{"bytes":541,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":144},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1168,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":529}],"tls":{"version":"tls1.2","sni":"sf3-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50752,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":286130,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":17},{"bytes":43,"dir":2,"interval":14},{"bytes":276,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":58},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":83},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":84},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":82},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"lf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50753,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":948,"s2c_bytes":6329,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":497,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":965,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":139},{"bytes":43,"dir":2,"interval":136},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":123},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":172,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":123},{"bytes":1460,"dir":2,"interval":1},{"bytes":820,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":211}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50770,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":27},{"bytes":51,"dir":2,"interval":24},{"bytes":284,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":104},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":64},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":104},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50771,"dip":"1.56.130.214","dport":443,"proto":"tcp","c2s_bytes":938,"s2c_bytes":274238,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":76},{"bytes":43,"dir":2,"interval":44},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":62},{"bytes":42,"dir":1,"interval":8},{"bytes":34,"dir":1,"interval":0},{"bytes":151,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":70},{"bytes":1460,"dir":2,"interval":1},{"bytes":1120,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":44},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":52},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":149},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":906,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":597,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":59},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf3-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50768,"dip":"17.250.120.40","dport":443,"proto":"tcp","c2s_bytes":3228,"s2c_bytes":6826,"c2s_pkts":13,"s2c_pkts":10,"total_pkts":23,"duration":3577,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":588,"dir":2,"interval":0},{"bytes":754,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":901},{"bytes":120,"dir":2,"interval":842},{"bytes":53,"dir":1,"interval":142},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":883,"dir":1,"interval":0},{"bytes":403,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":140},{"bytes":663,"dir":2,"interval":123},{"bytes":148,"dir":1,"interval":341},{"bytes":408,"dir":1,"interval":0},{"bytes":567,"dir":2,"interval":334},{"bytes":156,"dir":1,"interval":244},{"bytes":406,"dir":1,"interval":0},{"bytes":604,"dir":2,"interval":239},{"bytes":31,"dir":1,"interval":1946}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50769,"dip":"17.250.120.40","dport":443,"proto":"tcp","c2s_bytes":2214,"s2c_bytes":5679,"c2s_pkts":9,"s2c_pkts":9,"total_pkts":18,"duration":3578,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":588,"dir":2,"interval":0},{"bytes":753,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":902},{"bytes":120,"dir":2,"interval":841},{"bytes":53,"dir":1,"interval":143},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":938,"dir":1,"interval":0},{"bytes":452,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":135},{"bytes":650,"dir":2,"interval":174},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":2532}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50779,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":251},{"bytes":51,"dir":2,"interval":248},{"bytes":284,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":56},{"bytes":1460,"dir":2,"interval":32},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":76},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50784,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":30},{"bytes":51,"dir":2,"interval":24},{"bytes":284,"dir":1,"interval":10},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":74},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50788,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":285939,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":12},{"bytes":43,"dir":2,"interval":9},{"bytes":276,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1269,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":29},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50792,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":286171,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1420,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":23},{"bytes":51,"dir":2,"interval":20},{"bytes":284,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50799,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":878,"s2c_bytes":286129,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":11},{"bytes":43,"dir":2,"interval":8},{"bytes":276,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":7},{"bytes":1459,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50801,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":901,"s2c_bytes":63487,"c2s_pkts":4,"s2c_pkts":45,"total_pkts":49,"duration":75,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":13},{"bytes":43,"dir":2,"interval":10},{"bytes":276,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":983,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1214,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":51}],"tls":{"version":"tls1.2","sni":"sf1-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50772,"dip":"17.250.120.40","dport":443,"proto":"tcp","c2s_bytes":2164,"s2c_bytes":947,"c2s_pkts":9,"s2c_pkts":4,"total_pkts":13,"duration":2082,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":96},{"bytes":53,"dir":1,"interval":24},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":938,"dir":1,"interval":4},{"bytes":444,"dir":1,"interval":0},{"bytes":69,"dir":2,"interval":64},{"bytes":38,"dir":2,"interval":24},{"bytes":38,"dir":1,"interval":84},{"bytes":686,"dir":2,"interval":128},{"bytes":31,"dir":1,"interval":1872}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50802,"dip":"60.215.125.103","dport":443,"proto":"tcp","c2s_bytes":938,"s2c_bytes":274196,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":135},{"bytes":43,"dir":2,"interval":31},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":48},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":151,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":366},{"bytes":1460,"dir":2,"interval":1},{"bytes":1078,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":958,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":427},{"bytes":1460,"dir":2,"interval":44},{"bytes":545,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"sf3-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59056,"dip":"119.249.48.221","dport":443,"proto":"tcp","c2s_bytes":28005,"s2c_bytes":182295,"c2s_pkts":34,"s2c_pkts":166,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":20},{"bytes":234,"dir":2,"interval":17},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":14},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":805,"dir":1,"interval":0},{"bytes":894,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":14},{"bytes":679,"dir":2,"interval":124},{"bytes":30,"dir":2,"interval":0},{"bytes":645,"dir":2,"interval":872},{"bytes":1460,"dir":2,"interval":0},{"bytes":1372,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1449,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1457,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":376,"dir":2,"interval":0},{"bytes":1040,"dir":1,"interval":3835},{"bytes":1045,"dir":1,"interval":1},{"bytes":706,"dir":2,"interval":3018},{"bytes":30,"dir":2,"interval":0},{"bytes":943,"dir":2,"interval":606},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":969,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":68},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1244,"dir":1,"interval":29335},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":28400},{"bytes":1460,"dir":2,"interval":23},{"bytes":873,"dir":2,"interval":0},{"bytes":233,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1043,"dir":1,"interval":12572},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":12547},{"bytes":744,"dir":2,"interval":254},{"bytes":30,"dir":2,"interval":0},{"bytes":1286,"dir":1,"interval":554},{"bytes":1460,"dir":2,"interval":1165},{"bytes":1460,"dir":2,"interval":0},{"bytes":1086,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1449,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1456,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1456,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":282},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1161,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":4045},{"bytes":684,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":722,"dir":2,"interval":3117},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":467},{"bytes":1460,"dir":2,"interval":0},{"bytes":1250,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":32},{"bytes":43,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":7412},{"bytes":855,"dir":1,"interval":0},{"bytes":1083,"dir":1,"interval":11},{"bytes":977,"dir":2,"interval":6753},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1072,"dir":1,"interval":135},{"bytes":787,"dir":2,"interval":131},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1086,"dir":1,"interval":121},{"bytes":739,"dir":2,"interval":43},{"bytes":30,"dir":2,"interval":0},{"bytes":691,"dir":2,"interval":375},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":5,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1444,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":62},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":117},{"bytes":353,"dir":2,"interval":0},{"bytes":1033,"dir":1,"interval":898},{"bytes":699,"dir":2,"interval":591},{"bytes":30,"dir":2,"interval":0},{"bytes":964,"dir":1,"interval":440},{"bytes":1211,"dir":1,"interval":11},{"bytes":407,"dir":2,"interval":224},{"bytes":1460,"dir":2,"interval":0},{"bytes":759,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":693,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":250},{"bytes":1460,"dir":2,"interval":0},{"bytes":1150,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":387,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":11690},{"bytes":851,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":11377},{"bytes":758,"dir":2,"interval":268},{"bytes":30,"dir":2,"interval":0},{"bytes":1296,"dir":1,"interval":1092},{"bytes":1460,"dir":2,"interval":1407},{"bytes":711,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":769,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":229,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1077,"dir":2,"interval":0},{"bytes":1044,"dir":1,"interval":2546},{"bytes":1262,"dir":1,"interval":17},{"bytes":708,"dir":2,"interval":2192},{"bytes":30,"dir":2,"interval":0},{"bytes":604,"dir":2,"interval":406},{"bytes":1460,"dir":2,"interval":0},{"bytes":249,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":432,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1445,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"lf-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50810,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":832,"s2c_bytes":9446,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":275,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1392,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":284,"dir":1,"interval":250},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":480,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":19}],"tls":{"version":"tls1.2","sni":"lf6-hscdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50809,"dip":"17.146.232.38","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4576,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":532,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":103,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":7},{"bytes":51,"dir":2,"interval":178}],"tls":{"version":"tls1.2","sni":"lcdn-locator.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50727,"dip":"104.124.232.195","dport":443,"proto":"tcp","c2s_bytes":2094,"s2c_bytes":4630,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30945,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":156},{"bytes":43,"dir":2,"interval":95},{"bytes":1436,"dir":1,"interval":95},{"bytes":550,"dir":2,"interval":252},{"bytes":23,"dir":1,"interval":30693}],"tls":{"version":"tls1.2","sni":"xp.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50793,"dip":"17.250.120.40","dport":443,"proto":"tcp","c2s_bytes":3409,"s2c_bytes":3650,"c2s_pkts":11,"s2c_pkts":7,"total_pkts":18,"duration":3129,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":123},{"bytes":53,"dir":1,"interval":22},{"bytes":69,"dir":2,"interval":81},{"bytes":50,"dir":1,"interval":66},{"bytes":42,"dir":1,"interval":0},{"bytes":885,"dir":1,"interval":0},{"bytes":547,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":6},{"bytes":38,"dir":2,"interval":90},{"bytes":667,"dir":2,"interval":124},{"bytes":156,"dir":1,"interval":577},{"bytes":1039,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":621},{"bytes":588,"dir":2,"interval":0},{"bytes":674,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":2332}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50731,"dip":"17.248.161.144","dport":443,"proto":"tcp","c2s_bytes":10467,"s2c_bytes":8195,"c2s_pkts":12,"s2c_pkts":9,"total_pkts":21,"duration":32574,"packets":[{"bytes":237,"dir":1,"interval":0},{"bytes":145,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":141},{"bytes":646,"dir":1,"interval":6},{"bytes":1448,"dir":2,"interval":174},{"bytes":600,"dir":2,"interval":0},{"bytes":717,"dir":2,"interval":0},{"bytes":567,"dir":1,"interval":358},{"bytes":1448,"dir":2,"interval":418},{"bytes":600,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":1031,"dir":1,"interval":395},{"bytes":1047,"dir":2,"interval":337},{"bytes":1448,"dir":1,"interval":329},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":716,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":4},{"bytes":1396,"dir":1,"interval":0},{"bytes":1051,"dir":2,"interval":399},{"bytes":31,"dir":1,"interval":31336}],"tls":{"version":"tls1.2","sni":"setup.icloud.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,11,10]}}
{"sip":"192.168.50.193","sport":50739,"dip":"50.16.220.169","dport":443,"proto":"tcp","c2s_bytes":1859,"s2c_bytes":304,"c2s_pkts":5,"s2c_pkts":3,"total_pkts":8,"duration":31000,"packets":[{"bytes":238,"dir":1,"interval":0},{"bytes":145,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":471},{"bytes":695,"dir":1,"interval":5},{"bytes":844,"dir":1,"interval":12},{"bytes":128,"dir":2,"interval":261},{"bytes":31,"dir":2,"interval":30259},{"bytes":31,"dir":1,"interval":30507}],"tls":{"version":"tls1.2","sni":"e.crashlytics.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,11,10]}}
{"sip":"192.168.50.193","sport":50741,"dip":"23.21.110.39","dport":443,"proto":"tcp","c2s_bytes":1823,"s2c_bytes":304,"c2s_pkts":5,"s2c_pkts":3,"total_pkts":8,"duration":30996,"packets":[{"bytes":238,"dir":1,"interval":0},{"bytes":145,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":472},{"bytes":695,"dir":1,"interval":11},{"bytes":808,"dir":1,"interval":0},{"bytes":128,"dir":2,"interval":253},{"bytes":31,"dir":2,"interval":30261},{"bytes":31,"dir":1,"interval":30508}],"tls":{"version":"tls1.2","sni":"e.crashlytics.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,11,10]}}
{"sip":"192.168.50.193","sport":50738,"dip":"50.16.220.169","dport":443,"proto":"tcp","c2s_bytes":5537,"s2c_bytes":6335,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":31807,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":520},{"bytes":51,"dir":2,"interval":285},{"bytes":695,"dir":1,"interval":267},{"bytes":843,"dir":1,"interval":13},{"bytes":128,"dir":2,"interval":279},{"bytes":696,"dir":1,"interval":257},{"bytes":1032,"dir":1,"interval":0},{"bytes":128,"dir":2,"interval":261},{"bytes":695,"dir":1,"interval":261},{"bytes":902,"dir":1,"interval":1},{"bytes":128,"dir":2,"interval":255},{"bytes":31,"dir":2,"interval":30233},{"bytes":31,"dir":1,"interval":30482}],"tls":{"version":"tls1.2","sni":"e.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50740,"dip":"23.21.110.39","dport":443,"proto":"tcp","c2s_bytes":1820,"s2c_bytes":304,"c2s_pkts":5,"s2c_pkts":3,"total_pkts":8,"duration":31011,"packets":[{"bytes":238,"dir":1,"interval":0},{"bytes":145,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":513},{"bytes":695,"dir":1,"interval":1},{"bytes":805,"dir":1,"interval":2},{"bytes":128,"dir":2,"interval":267},{"bytes":31,"dir":2,"interval":30236},{"bytes":31,"dir":1,"interval":30494}],"tls":{"version":"tls1.2","sni":"e.crashlytics.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,11,10]}}
{"sip":"192.168.50.193","sport":50796,"dip":"122.14.43.168","dport":443,"proto":"tcp","c2s_bytes":1006,"s2c_bytes":5650,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":14407,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":202},{"bytes":43,"dir":2,"interval":195},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":139},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":253,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":138},{"bytes":1460,"dir":2,"interval":2},{"bytes":1185,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s3b.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50795,"dip":"113.229.252.115","dport":443,"proto":"tcp","c2s_bytes":1238,"s2c_bytes":24874,"c2s_pkts":9,"s2c_pkts":23,"total_pkts":32,"duration":14360,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":157},{"bytes":43,"dir":2,"interval":153},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":137},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":259,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":137},{"bytes":1029,"dir":2,"interval":1},{"bytes":30,"dir":2,"interval":0},{"bytes":131,"dir":1,"interval":243},{"bytes":95,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":243},{"bytes":1460,"dir":2,"interval":0},{"bytes":588,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1242,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s3.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50800,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1079,"s2c_bytes":4345,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":13814,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":35},{"bytes":43,"dir":2,"interval":30},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":15},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":326,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":15},{"bytes":1340,"dir":2,"interval":2},{"bytes":30,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s2.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50743,"dip":"17.248.161.17","dport":443,"proto":"tcp","c2s_bytes":1939,"s2c_bytes":7187,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":31601,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":566,"dir":2,"interval":7},{"bytes":93,"dir":1,"interval":475},{"bytes":51,"dir":2,"interval":253},{"bytes":1110,"dir":1,"interval":397},{"bytes":188,"dir":1,"interval":0},{"bytes":778,"dir":2,"interval":458},{"bytes":31,"dir":1,"interval":30728}],"tls":{"version":"tls1.2","sni":"p46-quota.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50742,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1781,"s2c_bytes":6346,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":32005,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":971,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":55},{"bytes":43,"dir":2,"interval":52},{"bytes":578,"dir":1,"interval":33},{"bytes":1206,"dir":2,"interval":36},{"bytes":578,"dir":1,"interval":1713},{"bytes":1206,"dir":2,"interval":1712},{"bytes":23,"dir":1,"interval":30182}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50744,"dip":"17.248.161.169","dport":443,"proto":"tcp","c2s_bytes":2584,"s2c_bytes":8416,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":32219,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":600,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":1099,"dir":2,"interval":8},{"bytes":93,"dir":1,"interval":574},{"bytes":51,"dir":2,"interval":364},{"bytes":987,"dir":1,"interval":477},{"bytes":737,"dir":2,"interval":526},{"bytes":987,"dir":1,"interval":798},{"bytes":737,"dir":2,"interval":791}],"tls":{"version":"tls1.2","sni":"p46-mobilebackup.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50818,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":207,"s2c_bytes":8812,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":295,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59061,"dip":"122.14.230.138","dport":443,"proto":"tcp","c2s_bytes":2616,"s2c_bytes":4312,"c2s_pkts":9,"s2c_pkts":9,"total_pkts":18,"duration":90103,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":385,"dir":2,"interval":2},{"bytes":93,"dir":1,"interval":17},{"bytes":274,"dir":2,"interval":13},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":16},{"bytes":56,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":1424,"dir":1,"interval":0},{"bytes":658,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":16},{"bytes":42,"dir":2,"interval":1},{"bytes":546,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gini.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c013","0033","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50832,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":8811,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":170,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50820,"dip":"17.42.254.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5220,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":702,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":10},{"bytes":51,"dir":2,"interval":230}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50837,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":822,"s2c_bytes":286496,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":305,"dir":1,"interval":184},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"hybrid.static.yximgs.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50826,"dip":"176.34.132.72","dport":443,"proto":"tcp","c2s_bytes":233,"s2c_bytes":3348,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":894,"packets":[{"bytes":233,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1265,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":284}],"tls":{"version":"tls1.2","sni":"events.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50828,"dip":"54.76.225.200","dport":443,"proto":"tcp","c2s_bytes":228,"s2c_bytes":3348,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":990,"packets":[{"bytes":228,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1265,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":288}],"tls":{"version":"tls1.2","sni":"t.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50847,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":207,"s2c_bytes":8812,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":119,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50848,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":8811,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":103,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50782,"dip":"17.248.159.140","dport":443,"proto":"tcp","c2s_bytes":1434,"s2c_bytes":8363,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":31191,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":989,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":234},{"bytes":51,"dir":2,"interval":168},{"bytes":793,"dir":1,"interval":163},{"bytes":1195,"dir":2,"interval":273},{"bytes":31,"dir":1,"interval":30794}],"tls":{"version":"tls1.2","sni":"keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50747,"dip":"17.248.161.46","dport":443,"proto":"tcp","c2s_bytes":4604,"s2c_bytes":10479,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":44364,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":989,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":219},{"bytes":51,"dir":2,"interval":141},{"bytes":901,"dir":1,"interval":261},{"bytes":530,"dir":1,"interval":0},{"bytes":1248,"dir":2,"interval":457},{"bytes":913,"dir":1,"interval":13360},{"bytes":292,"dir":1,"interval":0},{"bytes":948,"dir":2,"interval":13283},{"bytes":905,"dir":1,"interval":239},{"bytes":422,"dir":1,"interval":0},{"bytes":1115,"dir":2,"interval":248},{"bytes":31,"dir":1,"interval":30283}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50842,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":1161,"s2c_bytes":3040,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":12302,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":321},{"bytes":259,"dir":1,"interval":7},{"bytes":270,"dir":2,"interval":33},{"bytes":259,"dir":1,"interval":1204},{"bytes":270,"dir":2,"interval":1201}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50836,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":2454,"s2c_bytes":3428,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":13167,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":741,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":594},{"bytes":682,"dir":1,"interval":87},{"bytes":206,"dir":1,"interval":0},{"bytes":668,"dir":2,"interval":306},{"bytes":689,"dir":1,"interval":403},{"bytes":234,"dir":1,"interval":0},{"bytes":293,"dir":2,"interval":400}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50843,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":1248,"s2c_bytes":2754,"c2s_pkts":3,"s2c_pkts":4,"total_pkts":7,"duration":11939,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":429},{"bytes":605,"dir":1,"interval":5},{"bytes":270,"dir":2,"interval":29}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50823,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":3532,"s2c_bytes":6659,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":13794,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":304},{"bytes":682,"dir":1,"interval":98},{"bytes":363,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":175},{"bytes":987,"dir":2,"interval":0},{"bytes":685,"dir":1,"interval":72},{"bytes":206,"dir":1,"interval":0},{"bytes":348,"dir":2,"interval":72},{"bytes":689,"dir":1,"interval":1642},{"bytes":264,"dir":1,"interval":0},{"bytes":304,"dir":2,"interval":1663}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50819,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":2278,"s2c_bytes":4667,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":13795,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":677,"dir":1,"interval":298},{"bytes":350,"dir":1,"interval":0},{"bytes":430,"dir":2,"interval":146},{"bytes":691,"dir":1,"interval":4858},{"bytes":43,"dir":1,"interval":2},{"bytes":672,"dir":2,"interval":4757}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50845,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1248,"s2c_bytes":3822,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":11452,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":299},{"bytes":605,"dir":1,"interval":5},{"bytes":270,"dir":2,"interval":30}],"tls":{"version":"tls1.2","sni":"upload.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50839,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":1853,"s2c_bytes":4092,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":12906,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":335},{"bytes":605,"dir":1,"interval":100},{"bytes":270,"dir":2,"interval":235},{"bytes":605,"dir":1,"interval":1690},{"bytes":270,"dir":2,"interval":1690}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50835,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1161,"s2c_bytes":4108,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":13283,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":298},{"bytes":259,"dir":1,"interval":4},{"bytes":270,"dir":2,"interval":25},{"bytes":259,"dir":1,"interval":2189},{"bytes":270,"dir":2,"interval":2188}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50833,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1541,"s2c_bytes":3864,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":13375,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":359,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":396},{"bytes":692,"dir":1,"interval":2},{"bytes":206,"dir":1,"interval":0},{"bytes":327,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50850,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":1381,"s2c_bytes":3800,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":8621,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":359,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":290},{"bytes":691,"dir":1,"interval":7},{"bytes":47,"dir":1,"interval":0},{"bytes":279,"dir":2,"interval":82}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50829,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":1528,"s2c_bytes":3832,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":13498,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":215},{"bytes":679,"dir":1,"interval":19},{"bytes":206,"dir":1,"interval":27},{"bytes":295,"dir":2,"interval":146}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50822,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":4285,"s2c_bytes":22157,"c2s_pkts":10,"s2c_pkts":20,"total_pkts":30,"duration":13795,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":236},{"bytes":723,"dir":1,"interval":29},{"bytes":206,"dir":1,"interval":9},{"bytes":1448,"dir":2,"interval":137},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":6},{"bytes":170,"dir":2,"interval":0},{"bytes":702,"dir":1,"interval":131},{"bytes":206,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":111},{"bytes":91,"dir":2,"interval":0},{"bytes":686,"dir":1,"interval":68},{"bytes":206,"dir":1,"interval":0},{"bytes":312,"dir":2,"interval":65},{"bytes":689,"dir":1,"interval":109},{"bytes":224,"dir":1,"interval":0},{"bytes":656,"dir":2,"interval":115}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50830,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":1540,"s2c_bytes":6089,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":13498,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":215},{"bytes":691,"dir":1,"interval":19},{"bytes":206,"dir":1,"interval":27},{"bytes":1448,"dir":2,"interval":106},{"bytes":1104,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50831,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":1529,"s2c_bytes":9336,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":13498,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":224},{"bytes":680,"dir":1,"interval":10},{"bytes":206,"dir":1,"interval":27},{"bytes":1448,"dir":2,"interval":112},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50825,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":5676,"s2c_bytes":11632,"c2s_pkts":12,"s2c_pkts":12,"total_pkts":24,"duration":13794,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":467},{"bytes":679,"dir":1,"interval":7},{"bytes":218,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":108},{"bytes":685,"dir":1,"interval":479},{"bytes":221,"dir":1,"interval":0},{"bytes":953,"dir":2,"interval":481},{"bytes":687,"dir":1,"interval":756},{"bytes":234,"dir":1,"interval":1},{"bytes":1452,"dir":2,"interval":791},{"bytes":1452,"dir":2,"interval":0},{"bytes":1443,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":405},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":351},{"bytes":1452,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":695,"dir":1,"interval":1573},{"bytes":693,"dir":1,"interval":2},{"bytes":315,"dir":2,"interval":1600}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50846,"dip":"103.107.217.130","dport":443,"proto":"tcp","c2s_bytes":902,"s2c_bytes":3838,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":11113,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":300},{"bytes":259,"dir":1,"interval":4},{"bytes":270,"dir":2,"interval":32}],"tls":{"version":"tls1.2","sni":"upload.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59623,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":560,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":399,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":355}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50861,"dip":"17.42.254.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5220,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":714,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":5},{"bytes":51,"dir":2,"interval":226}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50726,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1778,"s2c_bytes":31974,"c2s_pkts":8,"s2c_pkts":28,"total_pkts":36,"duration":60297,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":167},{"bytes":43,"dir":2,"interval":163},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":41},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1002,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":41},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1043,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":104},{"bytes":885,"dir":2,"interval":246},{"bytes":38,"dir":2,"interval":59649},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60088}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50728,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":3024,"s2c_bytes":32634,"c2s_pkts":10,"s2c_pkts":42,"total_pkts":52,"duration":64762,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":67},{"bytes":43,"dir":2,"interval":63},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":67},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":892,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":68},{"bytes":1460,"dir":2,"interval":1343},{"bytes":1323,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1004},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":465},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1006},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":494,"dir":2,"interval":1},{"bytes":30,"dir":2,"interval":0},{"bytes":1203,"dir":1,"interval":4279},{"bytes":153,"dir":1,"interval":0},{"bytes":400,"dir":2,"interval":699},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60002},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60346}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50876,"dip":"17.248.153.169","dport":443,"proto":"tcp","c2s_bytes":280107,"s2c_bytes":3937,"c2s_pkts":195,"s2c_pkts":5,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":183,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":74},{"bytes":126,"dir":1,"interval":948},{"bytes":1448,"dir":1,"interval":930},{"bytes":1448,"dir":1,"interval":3},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":8},{"bytes":1448,"dir":1,"interval":-454},{"bytes":1448,"dir":1,"interval":454},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":2},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":2},{"bytes":1448,"dir":1,"interval":2},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":2},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":5},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":3},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":3},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":12},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":23},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":16},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":12},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":21},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":42},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":15},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":2},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":7},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":19},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":8},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":39},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":29},{"bytes":1448,"dir":1,"interval":26},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":20},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":12},{"bytes":1448,"dir":1,"interval":18},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":9},{"bytes":1448,"dir":1,"interval":16},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":9},{"bytes":1448,"dir":1,"interval":5},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":19},{"bytes":1448,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"jptyo.icloud-content.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50878,"dip":"17.250.120.40","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3665,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":612,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":2},{"bytes":327,"dir":2,"interval":132}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50672,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1822,"s2c_bytes":7546,"c2s_pkts":9,"s2c_pkts":14,"total_pkts":23,"duration":120118,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":28},{"bytes":43,"dir":2,"interval":21},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":14},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":829,"dir":1,"interval":0},{"bytes":217,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":24},{"bytes":485,"dir":2,"interval":29},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":866,"dir":2,"interval":0},{"bytes":179,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":120075}],"tls":{"version":"tls1.2","sni":"effect.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59046,"dip":"139.215.192.217","dport":443,"proto":"tcp","c2s_bytes":4898,"s2c_bytes":31542,"c2s_pkts":10,"s2c_pkts":33,"total_pkts":43,"duration":120185,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":156,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":33},{"bytes":234,"dir":2,"interval":30},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":45},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":701,"dir":1,"interval":0},{"bytes":990,"dir":1,"interval":0},{"bytes":988,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":3},{"bytes":30,"dir":2,"interval":55},{"bytes":1292,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":922,"dir":2,"interval":1},{"bytes":30,"dir":2,"interval":0},{"bytes":674,"dir":2,"interval":1},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":46},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":60},{"bytes":38,"dir":2,"interval":119898},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast3-hl.ixigua.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59055,"dip":"119.167.174.229","dport":443,"proto":"tcp","c2s_bytes":1090,"s2c_bytes":3767,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":120461,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":83},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":297,"dir":1,"interval":0},{"bytes":234,"dir":2,"interval":57},{"bytes":70,"dir":2,"interval":0},{"bytes":589,"dir":2,"interval":2},{"bytes":30,"dir":1,"interval":29},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":120000},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf3-ttcdn-tos.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59675,"dip":"110.249.203.158","dport":443,"proto":"tcp","c2s_bytes":927,"s2c_bytes":3467,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":15610,"packets":[{"bytes":216,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1361,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":20},{"bytes":118,"dir":1,"interval":578},{"bytes":593,"dir":1,"interval":12},{"bytes":357,"dir":2,"interval":42},{"bytes":31,"dir":2,"interval":15000}],"tls":{"version":"tls1.2","sni":"quic-amemv-all-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50862,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":2962,"s2c_bytes":8841,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30157,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":3},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":12},{"bytes":73,"dir":2,"interval":0},{"bytes":465,"dir":1,"interval":150},{"bytes":1440,"dir":1,"interval":0},{"bytes":540,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30065}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50730,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":5924,"s2c_bytes":9815,"c2s_pkts":11,"s2c_pkts":14,"total_pkts":25,"duration":92535,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1370,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":33},{"bytes":51,"dir":2,"interval":30},{"bytes":73,"dir":2,"interval":0},{"bytes":573,"dir":1,"interval":25},{"bytes":1440,"dir":1,"interval":0},{"bytes":529,"dir":1,"interval":0},{"bytes":542,"dir":2,"interval":30},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":33},{"bytes":567,"dir":1,"interval":32106},{"bytes":1440,"dir":1,"interval":1},{"bytes":608,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":536,"dir":2,"interval":32141},{"bytes":37,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":60000},{"bytes":31,"dir":1,"interval":60335}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59569,"dip":"60.221.23.88","dport":443,"proto":"tcp","c2s_bytes":811,"s2c_bytes":87029,"c2s_pkts":7,"s2c_pkts":65,"total_pkts":72,"duration":60193,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":18},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":148},{"bytes":45,"dir":1,"interval":2},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":5},{"bytes":324,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":836,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1178,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":59972},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf1-ttcdn-tos.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59692,"dip":"121.22.232.215","dport":443,"proto":"tcp","c2s_bytes":1086,"s2c_bytes":4716,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":176,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":8},{"bytes":118,"dir":1,"interval":97},{"bytes":777,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":98},{"bytes":195,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"","cipher_suites":["c02b","c02f","009e","c02c","c030","009f","c009","c023","c013","c027","0033","0067","c00a","c024","c014","c028","0039","006b","009c","009d","002f","003c","0035","003d","000a"],"extensions_list":[65281,0,23,35,13,11,10]}}
{"sip":"192.168.50.193","sport":59634,"dip":"121.22.232.212","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":51385,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":9},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":172}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59635,"dip":"121.22.232.212","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":51385,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":9},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":172}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59633,"dip":"121.22.232.212","dport":443,"proto":"tcp","c2s_bytes":325,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":51385,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":172}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59625,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":560,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":51890,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":353}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59624,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":560,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":51892,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":355}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59627,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":560,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":51536,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":5},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":1},{"bytes":43,"dir":1,"interval":548}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59628,"dip":"125.39.135.237","dport":443,"proto":"tcp","c2s_bytes":323,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":51398,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":118}],"tls":{"version":"tls1.2","sni":"log-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59638,"dip":"125.39.135.237","dport":443,"proto":"tcp","c2s_bytes":320,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":51386,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":106}],"tls":{"version":"tls1.2","sni":"jsb.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59630,"dip":"125.39.135.237","dport":443,"proto":"tcp","c2s_bytes":323,"s2c_bytes":3124,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":51399,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":118}],"tls":{"version":"tls1.2","sni":"log-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50879,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":2967,"s2c_bytes":8842,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30174,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":470,"dir":1,"interval":166},{"bytes":1440,"dir":1,"interval":0},{"bytes":540,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30066}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59651,"dip":"101.75.228.67","dport":443,"proto":"tcp","c2s_bytes":919,"s2c_bytes":3619,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":60639,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":118,"dir":1,"interval":603},{"bytes":589,"dir":1,"interval":13},{"bytes":477,"dir":2,"interval":182},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":60005}],"tls":{"version":"tls1.2","sni":"aweme-swan-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59712,"dip":"121.22.232.215","dport":443,"proto":"tcp","c2s_bytes":309,"s2c_bytes":3030,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":1736,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1344,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":9},{"bytes":118,"dir":1,"interval":1729}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"","cipher_suites":["c02b","c02f","009e","c02c","c030","009f","c009","c023","c013","c027","0033","0067","c00a","c024","c014","c028","0039","006b","009c","009d","002f","003c","0035","003d","000a"],"extensions_list":[65281,0,23,35,13,11,10]}}
{"sip":"192.168.50.193","sport":50866,"dip":"182.18.72.137","dport":443,"proto":"tcp","c2s_bytes":3338,"s2c_bytes":264114,"c2s_pkts":11,"s2c_pkts":189,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":477,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":13},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":135},{"bytes":58,"dir":1,"interval":180},{"bytes":280,"dir":1,"interval":15},{"bytes":1448,"dir":2,"interval":241},{"bytes":1448,"dir":2,"interval":0},{"bytes":1055,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":8978},{"bytes":1448,"dir":2,"interval":8980},{"bytes":1448,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":13140},{"bytes":1448,"dir":2,"interval":13136},{"bytes":1448,"dir":2,"interval":0},{"bytes":865,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":21527},{"bytes":1448,"dir":2,"interval":21528},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":105,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":1801},{"bytes":1448,"dir":2,"interval":1790},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":624,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":8524},{"bytes":1448,"dir":2,"interval":8509},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":679,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":7822},{"bytes":1448,"dir":2,"interval":7821},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1011,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":2419},{"bytes":1448,"dir":2,"interval":2406},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50865,"dip":"122.14.43.166","dport":443,"proto":"tcp","c2s_bytes":2651,"s2c_bytes":259890,"c2s_pkts":9,"s2c_pkts":191,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":93},{"bytes":287,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":57,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":706,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":9224},{"bytes":1460,"dir":2,"interval":9217},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1196,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":431,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":13139},{"bytes":1460,"dir":2,"interval":13134},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":967,"dir":2,"interval":0},{"bytes":286,"dir":1,"interval":23329},{"bytes":1460,"dir":2,"interval":23324},{"bytes":226,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":868,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":8524},{"bytes":1460,"dir":2,"interval":8527},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":43,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":5738},{"bytes":1460,"dir":2,"interval":5749},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1449,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":7264},{"bytes":1460,"dir":2,"interval":7246},{"bytes":1460,"dir":2,"interval":0},{"bytes":57,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p3-dy.byteimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59328,"dip":"139.215.192.214","dport":443,"proto":"tcp","c2s_bytes":3188,"s2c_bytes":3810,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":120120,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":30},{"bytes":45,"dir":1,"interval":3},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":11},{"bytes":969,"dir":1,"interval":0},{"bytes":234,"dir":2,"interval":31},{"bytes":61,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":23},{"bytes":581,"dir":2,"interval":44},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120001},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"security-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50737,"dip":"17.250.120.40","dport":443,"proto":"tcp","c2s_bytes":4073,"s2c_bytes":11593,"c2s_pkts":14,"s2c_pkts":14,"total_pkts":28,"duration":123225,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1354,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":152},{"bytes":120,"dir":2,"interval":91},{"bytes":53,"dir":1,"interval":81},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":815,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":81},{"bytes":1448,"dir":2,"interval":2},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":573,"dir":2,"interval":0},{"bytes":292,"dir":1,"interval":213},{"bytes":585,"dir":1,"interval":0},{"bytes":123,"dir":1,"interval":0},{"bytes":633,"dir":1,"interval":0},{"bytes":781,"dir":2,"interval":560},{"bytes":595,"dir":2,"interval":18},{"bytes":168,"dir":1,"interval":2080},{"bytes":633,"dir":1,"interval":0},{"bytes":556,"dir":2,"interval":1870},{"bytes":31,"dir":1,"interval":120697}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50887,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":836,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59062,"dip":"221.194.149.1","dport":443,"proto":"tcp","c2s_bytes":881,"s2c_bytes":3894,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":180051,"packets":[{"bytes":218,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1386,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":19},{"bytes":274,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":15},{"bytes":56,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":306,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":14},{"bytes":590,"dir":2,"interval":3},{"bytes":42,"dir":1,"interval":49},{"bytes":46,"dir":2,"interval":180002},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sf6-ttcdn-tos.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c013","0033","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59049,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":3478,"s2c_bytes":9774,"c2s_pkts":27,"s2c_pkts":39,"total_pkts":66,"duration":180655,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":2},{"bytes":93,"dir":1,"interval":33},{"bytes":274,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":5},{"bytes":56,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":5},{"bytes":259,"dir":1,"interval":39},{"bytes":145,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":270,"dir":2,"interval":39},{"bytes":392,"dir":2,"interval":0},{"bytes":386,"dir":2,"interval":0},{"bytes":137,"dir":1,"interval":20},{"bytes":143,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":23},{"bytes":48,"dir":2,"interval":0},{"bytes":344,"dir":2,"interval":0},{"bytes":387,"dir":2,"interval":0},{"bytes":136,"dir":1,"interval":5762},{"bytes":318,"dir":2,"interval":5761},{"bytes":48,"dir":2,"interval":0},{"bytes":136,"dir":1,"interval":554},{"bytes":323,"dir":2,"interval":553},{"bytes":48,"dir":2,"interval":0},{"bytes":135,"dir":1,"interval":15034},{"bytes":46,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":15034},{"bytes":305,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":35547},{"bytes":46,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":35547},{"bytes":291,"dir":2,"interval":1},{"bytes":48,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":5646},{"bytes":286,"dir":2,"interval":5644},{"bytes":48,"dir":2,"interval":0},{"bytes":135,"dir":1,"interval":505},{"bytes":284,"dir":2,"interval":505},{"bytes":48,"dir":2,"interval":0},{"bytes":135,"dir":1,"interval":2560},{"bytes":315,"dir":2,"interval":2568},{"bytes":48,"dir":2,"interval":1},{"bytes":143,"dir":1,"interval":12101},{"bytes":46,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":12092},{"bytes":307,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":147,"dir":1,"interval":756},{"bytes":286,"dir":2,"interval":758},{"bytes":48,"dir":2,"interval":0},{"bytes":138,"dir":1,"interval":10780},{"bytes":46,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":10778},{"bytes":335,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":138,"dir":1,"interval":370},{"bytes":334,"dir":2,"interval":381},{"bytes":48,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59636,"dip":"121.22.232.212","dport":443,"proto":"tcp","c2s_bytes":21166,"s2c_bytes":91386,"c2s_pkts":62,"s2c_pkts":138,"total_pkts":200,"duration":0,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":9},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":172},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":759,"dir":1,"interval":0},{"bytes":644,"dir":1,"interval":0},{"bytes":786,"dir":1,"interval":0},{"bytes":627,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":100},{"bytes":701,"dir":2,"interval":43},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":24},{"bytes":122,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":102},{"bytes":1460,"dir":2,"interval":40},{"bytes":1182,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":228,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":856,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":484},{"bytes":308,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":33,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":513,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":926},{"bytes":147,"dir":1,"interval":0},{"bytes":471,"dir":2,"interval":494},{"bytes":38,"dir":2,"interval":0},{"bytes":462,"dir":1,"interval":801},{"bytes":529,"dir":2,"interval":748},{"bytes":38,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":1139},{"bytes":737,"dir":2,"interval":1137},{"bytes":38,"dir":2,"interval":0},{"bytes":220,"dir":1,"interval":793},{"bytes":316,"dir":2,"interval":786},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":58},{"bytes":277,"dir":2,"interval":61},{"bytes":38,"dir":2,"interval":0},{"bytes":114,"dir":1,"interval":451},{"bytes":114,"dir":1,"interval":6},{"bytes":301,"dir":2,"interval":447},{"bytes":38,"dir":2,"interval":0},{"bytes":184,"dir":2,"interval":26},{"bytes":38,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":6407},{"bytes":147,"dir":1,"interval":0},{"bytes":493,"dir":2,"interval":6441},{"bytes":38,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":13181},{"bytes":38,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":13155},{"bytes":474,"dir":2,"interval":30},{"bytes":38,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":21385},{"bytes":38,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":1},{"bytes":623,"dir":1,"interval":11},{"bytes":46,"dir":2,"interval":21356},{"bytes":486,"dir":2,"interval":29},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":229},{"bytes":1460,"dir":2,"interval":0},{"bytes":1285,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":563,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":7},{"bytes":744,"dir":1,"interval":1896},{"bytes":147,"dir":1,"interval":0},{"bytes":745,"dir":1,"interval":35},{"bytes":447,"dir":1,"interval":0},{"bytes":373,"dir":2,"interval":1853},{"bytes":38,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":4},{"bytes":38,"dir":2,"interval":0},{"bytes":363,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":456,"dir":1,"interval":8048},{"bytes":494,"dir":2,"interval":7853},{"bytes":38,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":433},{"bytes":147,"dir":1,"interval":0},{"bytes":496,"dir":2,"interval":475},{"bytes":38,"dir":2,"interval":0},{"bytes":493,"dir":1,"interval":1544},{"bytes":47,"dir":1,"interval":0},{"bytes":581,"dir":2,"interval":1565},{"bytes":38,"dir":2,"interval":0},{"bytes":488,"dir":1,"interval":4246},{"bytes":147,"dir":1,"interval":0},{"bytes":466,"dir":2,"interval":4184},{"bytes":38,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":2587},{"bytes":147,"dir":1,"interval":0},{"bytes":455,"dir":2,"interval":2625},{"bytes":38,"dir":2,"interval":0},{"bytes":458,"dir":1,"interval":1146},{"bytes":519,"dir":2,"interval":1106},{"bytes":38,"dir":2,"interval":0},{"bytes":479,"dir":1,"interval":760},{"bytes":147,"dir":1,"interval":0},{"bytes":642,"dir":1,"interval":3},{"bytes":472,"dir":2,"interval":811},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":602},{"bytes":178,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":26,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":395,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":461,"dir":1,"interval":1224},{"bytes":601,"dir":2,"interval":548},{"bytes":38,"dir":2,"interval":0},{"bytes":478,"dir":1,"interval":775},{"bytes":147,"dir":1,"interval":0},{"bytes":466,"dir":2,"interval":828},{"bytes":38,"dir":2,"interval":0},{"bytes":742,"dir":1,"interval":766},{"bytes":147,"dir":1,"interval":0},{"bytes":443,"dir":2,"interval":760},{"bytes":38,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":2645},{"bytes":147,"dir":1,"interval":0},{"bytes":479,"dir":2,"interval":2649},{"bytes":38,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":1762},{"bytes":147,"dir":1,"interval":0},{"bytes":482,"dir":2,"interval":1758},{"bytes":38,"dir":2,"interval":0},{"bytes":492,"dir":1,"interval":543},{"bytes":147,"dir":1,"interval":0},{"bytes":484,"dir":2,"interval":544},{"bytes":38,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":2000},{"bytes":147,"dir":1,"interval":0},{"bytes":454,"dir":2,"interval":2000},{"bytes":38,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":1666},{"bytes":147,"dir":1,"interval":0},{"bytes":435,"dir":2,"interval":1664},{"bytes":38,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":1351},{"bytes":147,"dir":1,"interval":0},{"bytes":624,"dir":1,"interval":1},{"bytes":455,"dir":2,"interval":1365},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":269},{"bytes":1215,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50884,"dip":"122.14.43.167","dport":443,"proto":"tcp","c2s_bytes":4485,"s2c_bytes":3732,"c2s_pkts":7,"s2c_pkts":4,"total_pkts":11,"duration":30985,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":47},{"bytes":632,"dir":1,"interval":8},{"bytes":1460,"dir":1,"interval":0},{"bytes":588,"dir":1,"interval":0},{"bytes":1131,"dir":1,"interval":0},{"bytes":671,"dir":2,"interval":68},{"bytes":31,"dir":1,"interval":30927}],"tls":{"version":"tls1.2","sni":"smr.snssdk.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59067,"dip":"61.149.11.113","dport":443,"proto":"tcp","c2s_bytes":31908,"s2c_bytes":136546,"c2s_pkts":43,"s2c_pkts":143,"total_pkts":186,"duration":191682,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":9},{"bytes":234,"dir":2,"interval":6},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":7},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":6},{"bytes":30,"dir":1,"interval":2},{"bytes":1034,"dir":1,"interval":0},{"bytes":865,"dir":1,"interval":0},{"bytes":865,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":416,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":118,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":205,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":913,"dir":1,"interval":2335},{"bytes":864,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":2319},{"bytes":559,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":535,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":912,"dir":1,"interval":1545},{"bytes":864,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1517},{"bytes":122,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":556,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":911,"dir":1,"interval":839},{"bytes":1460,"dir":2,"interval":838},{"bytes":330,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":911,"dir":1,"interval":2620},{"bytes":1460,"dir":2,"interval":2621},{"bytes":200,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":911,"dir":1,"interval":35204},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":35203},{"bytes":1460,"dir":2,"interval":1},{"bytes":447,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":913,"dir":1,"interval":1198},{"bytes":865,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1197},{"bytes":340,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":951,"dir":1,"interval":2161},{"bytes":1460,"dir":2,"interval":2161},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1157,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":866,"dir":1,"interval":435},{"bytes":852,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":434},{"bytes":1460,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":487,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":914,"dir":1,"interval":1618},{"bytes":1460,"dir":2,"interval":1618},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":990,"dir":1,"interval":1191},{"bytes":866,"dir":1,"interval":3},{"bytes":853,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1190},{"bytes":1460,"dir":2,"interval":0},{"bytes":824,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":853,"dir":1,"interval":2},{"bytes":853,"dir":1,"interval":0},{"bytes":853,"dir":1,"interval":0},{"bytes":853,"dir":1,"interval":0},{"bytes":853,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":889,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":853,"dir":1,"interval":21},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1214,"dir":2,"interval":0},{"bytes":913,"dir":1,"interval":13054},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":13018},{"bytes":1460,"dir":2,"interval":154},{"bytes":1233,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":23,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1231,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":865,"dir":1,"interval":167},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":912,"dir":1,"interval":683},{"bytes":865,"dir":1,"interval":0},{"bytes":866,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":673},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":558,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":0},{"bytes":627,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":912,"dir":1,"interval":8562},{"bytes":867,"dir":1,"interval":1},{"bytes":866,"dir":1,"interval":0},{"bytes":902,"dir":1,"interval":0},{"bytes":867,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":8487},{"bytes":1460,"dir":2,"interval":0},{"bytes":498,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":395,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":222},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":149},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":246,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":119624},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"a3-ipv6.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50883,"dip":"122.14.43.37","dport":443,"proto":"tcp","c2s_bytes":9953,"s2c_bytes":5960,"c2s_pkts":12,"s2c_pkts":8,"total_pkts":20,"duration":36156,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":82},{"bytes":564,"dir":1,"interval":8},{"bytes":1102,"dir":2,"interval":277},{"bytes":34,"dir":2,"interval":0},{"bytes":636,"dir":1,"interval":389},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":5},{"bytes":216,"dir":1,"interval":0},{"bytes":730,"dir":2,"interval":374},{"bytes":563,"dir":1,"interval":4774},{"bytes":999,"dir":2,"interval":4635},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30895}],"tls":{"version":"tls1.2","sni":"xlog.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50803,"dip":"17.250.120.40","dport":443,"proto":"tcp","c2s_bytes":1082,"s2c_bytes":9950,"c2s_pkts":8,"s2c_pkts":11,"total_pkts":19,"duration":120920,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":125},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":300,"dir":1,"interval":0},{"bytes":69,"dir":2,"interval":69},{"bytes":38,"dir":2,"interval":9},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":72},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1249,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120713}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50681,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":16139,"s2c_bytes":8570,"c2s_pkts":29,"s2c_pkts":22,"total_pkts":51,"duration":198510,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":23},{"bytes":43,"dir":2,"interval":18},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":51},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":731,"dir":1,"interval":0},{"bytes":640,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":49},{"bytes":480,"dir":2,"interval":9},{"bytes":30,"dir":2,"interval":0},{"bytes":146,"dir":1,"interval":2127},{"bytes":204,"dir":1,"interval":0},{"bytes":694,"dir":2,"interval":2128},{"bytes":30,"dir":2,"interval":0},{"bytes":148,"dir":1,"interval":14029},{"bytes":1460,"dir":1,"interval":5},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":202,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":14043},{"bytes":30,"dir":2,"interval":0},{"bytes":148,"dir":1,"interval":3167},{"bytes":410,"dir":1,"interval":26},{"bytes":339,"dir":2,"interval":3184},{"bytes":30,"dir":2,"interval":0},{"bytes":846,"dir":1,"interval":36946},{"bytes":1460,"dir":1,"interval":0},{"bytes":588,"dir":1,"interval":0},{"bytes":1078,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":36960},{"bytes":1247,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":148,"dir":1,"interval":21863},{"bytes":1460,"dir":1,"interval":3},{"bytes":588,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":168,"dir":1,"interval":0},{"bytes":341,"dir":2,"interval":21853},{"bytes":30,"dir":2,"interval":0},{"bytes":148,"dir":1,"interval":118},{"bytes":410,"dir":1,"interval":6},{"bytes":423,"dir":2,"interval":240},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":119997},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":120141}],"tls":{"version":"tls1.2","sni":"gurd.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50880,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":2395,"s2c_bytes":51092,"c2s_pkts":9,"s2c_pkts":39,"total_pkts":48,"duration":50705,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":166,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":128},{"bytes":287,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":586,"dir":2,"interval":0},{"bytes":286,"dir":1,"interval":18112},{"bytes":1460,"dir":2,"interval":18112},{"bytes":1460,"dir":2,"interval":0},{"bytes":1158,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":16675},{"bytes":1460,"dir":2,"interval":16675},{"bytes":1460,"dir":2,"interval":0},{"bytes":1171,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1053,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":1406},{"bytes":1460,"dir":2,"interval":1401},{"bytes":1460,"dir":2,"interval":0},{"bytes":718,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":12755},{"bytes":1460,"dir":2,"interval":12755},{"bytes":1460,"dir":2,"interval":0},{"bytes":722,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":1261},{"bytes":31,"dir":1,"interval":349}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50896,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3313,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":112,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":151,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50897,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":961,"s2c_bytes":3313,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":1314,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":151,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":106},{"bytes":287,"dir":1,"interval":8},{"bytes":31,"dir":1,"interval":1197}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59070,"dip":"139.215.192.217","dport":443,"proto":"tcp","c2s_bytes":27273,"s2c_bytes":22337,"c2s_pkts":41,"s2c_pkts":52,"total_pkts":93,"duration":201828,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":47},{"bytes":45,"dir":1,"interval":11},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":2},{"bytes":639,"dir":1,"interval":0},{"bytes":945,"dir":1,"interval":0},{"bytes":234,"dir":2,"interval":39},{"bytes":61,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":15},{"bytes":30,"dir":2,"interval":10},{"bytes":609,"dir":2,"interval":71},{"bytes":30,"dir":2,"interval":0},{"bytes":925,"dir":1,"interval":694},{"bytes":435,"dir":1,"interval":6},{"bytes":351,"dir":2,"interval":710},{"bytes":30,"dir":2,"interval":0},{"bytes":925,"dir":1,"interval":1557},{"bytes":265,"dir":1,"interval":0},{"bytes":401,"dir":2,"interval":1563},{"bytes":30,"dir":2,"interval":0},{"bytes":921,"dir":1,"interval":793},{"bytes":265,"dir":1,"interval":0},{"bytes":403,"dir":2,"interval":820},{"bytes":30,"dir":2,"interval":0},{"bytes":921,"dir":1,"interval":37037},{"bytes":38,"dir":1,"interval":0},{"bytes":435,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":36942},{"bytes":402,"dir":2,"interval":70},{"bytes":30,"dir":2,"interval":0},{"bytes":921,"dir":1,"interval":1195},{"bytes":435,"dir":1,"interval":9},{"bytes":403,"dir":2,"interval":1198},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":5398},{"bytes":847,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":11,"dir":1,"interval":0},{"bytes":562,"dir":2,"interval":5394},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":8988},{"bytes":717,"dir":1,"interval":0},{"bytes":633,"dir":1,"interval":2},{"bytes":403,"dir":2,"interval":9006},{"bytes":30,"dir":2,"interval":0},{"bytes":1087,"dir":1,"interval":12806},{"bytes":38,"dir":1,"interval":0},{"bytes":227,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":12732},{"bytes":403,"dir":2,"interval":67},{"bytes":30,"dir":2,"interval":0},{"bytes":882,"dir":1,"interval":748},{"bytes":1460,"dir":2,"interval":725},{"bytes":17,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":24,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":22,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":3},{"bytes":285,"dir":2,"interval":0},{"bytes":935,"dir":1,"interval":861},{"bytes":1030,"dir":2,"interval":873},{"bytes":356,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1035,"dir":1,"interval":974},{"bytes":1460,"dir":1,"interval":0},{"bytes":23,"dir":1,"interval":0},{"bytes":562,"dir":2,"interval":947},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":4207},{"bytes":724,"dir":1,"interval":36},{"bytes":270,"dir":1,"interval":-69},{"bytes":404,"dir":2,"interval":4289},{"bytes":30,"dir":2,"interval":0},{"bytes":1097,"dir":1,"interval":5103},{"bytes":708,"dir":2,"interval":4966},{"bytes":637,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":925,"dir":1,"interval":1298},{"bytes":233,"dir":1,"interval":0},{"bytes":380,"dir":2,"interval":1320},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120001},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ic-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59063,"dip":"221.204.173.224","dport":443,"proto":"tcp","c2s_bytes":53599,"s2c_bytes":8602,"c2s_pkts":54,"s2c_pkts":39,"total_pkts":93,"duration":207768,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":32},{"bytes":234,"dir":2,"interval":29},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":44},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1404,"dir":1,"interval":0},{"bytes":1133,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":5},{"bytes":30,"dir":2,"interval":44},{"bytes":738,"dir":2,"interval":42},{"bytes":30,"dir":2,"interval":0},{"bytes":960,"dir":1,"interval":9965},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":9930},{"bytes":34,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":91},{"bytes":1318,"dir":1,"interval":0},{"bytes":544,"dir":2,"interval":133},{"bytes":30,"dir":2,"interval":0},{"bytes":919,"dir":1,"interval":19792},{"bytes":38,"dir":1,"interval":0},{"bytes":1330,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":19749},{"bytes":396,"dir":2,"interval":26},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":20007},{"bytes":561,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":12},{"bytes":38,"dir":2,"interval":19983},{"bytes":1460,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":11},{"bytes":1460,"dir":1,"interval":21},{"bytes":580,"dir":1,"interval":0},{"bytes":398,"dir":2,"interval":45},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":20013},{"bytes":967,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":19991},{"bytes":1460,"dir":1,"interval":81},{"bytes":1460,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":81},{"bytes":1460,"dir":1,"interval":29},{"bytes":1460,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":28},{"bytes":1460,"dir":1,"interval":181},{"bytes":1162,"dir":1,"interval":0},{"bytes":389,"dir":2,"interval":231},{"bytes":30,"dir":2,"interval":0},{"bytes":956,"dir":1,"interval":169},{"bytes":1460,"dir":1,"interval":2},{"bytes":1460,"dir":1,"interval":82},{"bytes":24,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":234},{"bytes":30,"dir":2,"interval":0},{"bytes":949,"dir":1,"interval":16143},{"bytes":38,"dir":1,"interval":0},{"bytes":241,"dir":1,"interval":0},{"bytes":911,"dir":1,"interval":2},{"bytes":174,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":16115},{"bytes":485,"dir":2,"interval":32},{"bytes":30,"dir":2,"interval":0},{"bytes":496,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":749},{"bytes":975,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":34},{"bytes":1460,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":753},{"bytes":1460,"dir":1,"interval":15},{"bytes":1460,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":15},{"bytes":1460,"dir":1,"interval":23},{"bytes":1460,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":23},{"bytes":1076,"dir":1,"interval":20},{"bytes":479,"dir":2,"interval":55},{"bytes":30,"dir":2,"interval":0},{"bytes":946,"dir":1,"interval":154},{"bytes":1138,"dir":1,"interval":3},{"bytes":375,"dir":2,"interval":156},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120000},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"is-hl-ipv6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59054,"dip":"139.215.192.214","dport":443,"proto":"tcp","c2s_bytes":44601,"s2c_bytes":26185,"c2s_pkts":48,"s2c_pkts":57,"total_pkts":105,"duration":211314,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":34},{"bytes":234,"dir":2,"interval":31},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":45},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":651,"dir":1,"interval":0},{"bytes":604,"dir":1,"interval":0},{"bytes":1219,"dir":1,"interval":0},{"bytes":921,"dir":1,"interval":4},{"bytes":30,"dir":2,"interval":53},{"bytes":1460,"dir":1,"interval":25},{"bytes":577,"dir":1,"interval":0},{"bytes":839,"dir":2,"interval":47},{"bytes":30,"dir":2,"interval":0},{"bytes":632,"dir":2,"interval":16},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":190,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":788,"dir":2,"interval":2},{"bytes":30,"dir":2,"interval":66},{"bytes":1230,"dir":1,"interval":159},{"bytes":1460,"dir":2,"interval":90},{"bytes":206,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1182,"dir":1,"interval":89},{"bytes":1460,"dir":2,"interval":92},{"bytes":191,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":794,"dir":2,"interval":3},{"bytes":30,"dir":2,"interval":0},{"bytes":918,"dir":1,"interval":3499},{"bytes":1330,"dir":1,"interval":0},{"bytes":591,"dir":2,"interval":3480},{"bytes":30,"dir":2,"interval":0},{"bytes":917,"dir":1,"interval":9135},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":362,"dir":1,"interval":0},{"bytes":550,"dir":2,"interval":9145},{"bytes":40,"dir":2,"interval":1},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":34596},{"bytes":856,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":250,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":34549},{"bytes":665,"dir":2,"interval":42},{"bytes":30,"dir":2,"interval":0},{"bytes":919,"dir":1,"interval":3234},{"bytes":1460,"dir":1,"interval":0},{"bytes":110,"dir":1,"interval":0},{"bytes":592,"dir":2,"interval":3229},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":10186},{"bytes":712,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":6},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":58,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":10152},{"bytes":34,"dir":2,"interval":5},{"bytes":536,"dir":2,"interval":37},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1105,"dir":1,"interval":17168},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1406,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":17131},{"bytes":579,"dir":2,"interval":35},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1021,"dir":1,"interval":3183},{"bytes":1460,"dir":1,"interval":0},{"bytes":1054,"dir":1,"interval":0},{"bytes":579,"dir":2,"interval":3193},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":918,"dir":1,"interval":9872},{"bytes":770,"dir":1,"interval":0},{"bytes":586,"dir":2,"interval":9873},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120000},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mon-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59059,"dip":"1.189.219.234","dport":443,"proto":"tcp","c2s_bytes":1341,"s2c_bytes":4141,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":211511,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":34},{"bytes":234,"dir":2,"interval":32},{"bytes":1047,"dir":1,"interval":43},{"bytes":1039,"dir":2,"interval":81},{"bytes":26,"dir":2,"interval":0},{"bytes":23,"dir":2,"interval":120000}],"tls":{"version":"tls1.2","sni":"xlog.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c013","0033","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59058,"dip":"1.189.219.234","dport":443,"proto":"tcp","c2s_bytes":1342,"s2c_bytes":4301,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":211511,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":34},{"bytes":234,"dir":2,"interval":32},{"bytes":1048,"dir":1,"interval":44},{"bytes":1163,"dir":2,"interval":187},{"bytes":36,"dir":2,"interval":0},{"bytes":26,"dir":2,"interval":0},{"bytes":23,"dir":2,"interval":120001}],"tls":{"version":"tls1.2","sni":"xlog.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c013","0033","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59064,"dip":"1.189.219.234","dport":443,"proto":"tcp","c2s_bytes":6529,"s2c_bytes":3875,"c2s_pkts":9,"s2c_pkts":5,"total_pkts":14,"duration":211154,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":126},{"bytes":1165,"dir":1,"interval":6},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":234,"dir":2,"interval":123},{"bytes":413,"dir":1,"interval":28},{"bytes":170,"dir":1,"interval":12},{"bytes":1460,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":799,"dir":2,"interval":85},{"bytes":23,"dir":2,"interval":120000}],"tls":{"version":"tls1.2","sni":"xlog.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50889,"dip":"221.194.158.135","dport":443,"proto":"tcp","c2s_bytes":863,"s2c_bytes":13024,"c2s_pkts":3,"s2c_pkts":12,"total_pkts":15,"duration":32524,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":219,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":315,"dir":1,"interval":256},{"bytes":1448,"dir":2,"interval":84},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":932,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30459},{"bytes":31,"dir":2,"interval":32257}],"tls":{"version":"tls1.2","sni":"p16-sg.muscdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50890,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":2962,"s2c_bytes":8811,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":28954,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":465,"dir":1,"interval":373},{"bytes":1440,"dir":1,"interval":1},{"bytes":540,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59768,"dip":"220.243.131.102","dport":443,"proto":"tcp","c2s_bytes":1043,"s2c_bytes":3915,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":6843,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":73},{"bytes":45,"dir":1,"interval":3},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":251,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":17},{"bytes":30,"dir":1,"interval":3},{"bytes":285,"dir":2,"interval":4},{"bytes":48,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50899,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1275,"s2c_bytes":11665,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":16635,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":151,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":93},{"bytes":286,"dir":1,"interval":7},{"bytes":852,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":696,"dir":2,"interval":0},{"bytes":315,"dir":1,"interval":7113},{"bytes":1460,"dir":2,"interval":7088},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":9421}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59709,"dip":"121.18.239.212","dport":443,"proto":"tcp","c2s_bytes":11663,"s2c_bytes":4907,"c2s_pkts":19,"s2c_pkts":14,"total_pkts":33,"duration":51057,"packets":[{"bytes":201,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":84},{"bytes":45,"dir":1,"interval":12},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":2},{"bytes":717,"dir":1,"interval":0},{"bytes":446,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":30},{"bytes":599,"dir":2,"interval":51},{"bytes":38,"dir":2,"interval":0},{"bytes":288,"dir":1,"interval":1860},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":278,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1811},{"bytes":457,"dir":2,"interval":50},{"bytes":38,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":20437},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":449,"dir":1,"interval":4},{"bytes":46,"dir":2,"interval":20387},{"bytes":42,"dir":2,"interval":3},{"bytes":445,"dir":2,"interval":32},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mr.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50898,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1822,"s2c_bytes":44874,"c2s_pkts":7,"s2c_pkts":36,"total_pkts":43,"duration":16644,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":151,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":99},{"bytes":287,"dir":1,"interval":8},{"bytes":842,"dir":2,"interval":61},{"bytes":1460,"dir":2,"interval":0},{"bytes":670,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":139,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":6064},{"bytes":1460,"dir":2,"interval":6034},{"bytes":1460,"dir":2,"interval":0},{"bytes":1327,"dir":2,"interval":0},{"bytes":508,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":1048},{"bytes":1460,"dir":2,"interval":1048},{"bytes":1460,"dir":2,"interval":0},{"bytes":1330,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":820,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":381},{"bytes":1460,"dir":2,"interval":378},{"bytes":1460,"dir":2,"interval":0},{"bytes":885,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":9041}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59747,"dip":"27.221.119.230","dport":443,"proto":"tcp","c2s_bytes":560,"s2c_bytes":3385,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":23057,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":165}],"tls":{"version":"tls1.2","sni":"webcast3-c-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50894,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":943,"s2c_bytes":7852,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":17628,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":178},{"bytes":269,"dir":1,"interval":42},{"bytes":1460,"dir":2,"interval":82},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":395,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":17396}],"tls":{"version":"tls1.2","sni":"p1.pstatp.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59663,"dip":"110.249.203.251","dport":443,"proto":"tcp","c2s_bytes":915,"s2c_bytes":3894,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":108512,"packets":[{"bytes":210,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":164,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":20},{"bytes":118,"dir":1,"interval":486},{"bytes":587,"dir":1,"interval":0},{"bytes":520,"dir":2,"interval":152}],"tls":{"version":"tls1.2","sni":"api-eagle-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59667,"dip":"139.215.192.216","dport":443,"proto":"tcp","c2s_bytes":6055,"s2c_bytes":11299,"c2s_pkts":16,"s2c_pkts":28,"total_pkts":44,"duration":108030,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":793},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":5},{"bytes":34,"dir":1,"interval":0},{"bytes":384,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":134},{"bytes":429,"dir":2,"interval":57},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":173},{"bytes":875,"dir":1,"interval":46023},{"bytes":38,"dir":1,"interval":0},{"bytes":789,"dir":1,"interval":0},{"bytes":781,"dir":2,"interval":46172},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":23},{"bytes":536,"dir":1,"interval":84},{"bytes":1460,"dir":2,"interval":60},{"bytes":17,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":427,"dir":2,"interval":0},{"bytes":1151,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":721,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":537,"dir":1,"interval":20022},{"bytes":38,"dir":1,"interval":0},{"bytes":722,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":20050},{"bytes":599,"dir":2,"interval":33},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":1938},{"bytes":1170,"dir":1,"interval":0},{"bytes":532,"dir":2,"interval":1937},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"iu-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59716,"dip":"221.204.173.224","dport":443,"proto":"tcp","c2s_bytes":1673,"s2c_bytes":3804,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":48935,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":62},{"bytes":45,"dir":1,"interval":19},{"bytes":48,"dir":1,"interval":10},{"bytes":34,"dir":1,"interval":0},{"bytes":713,"dir":1,"interval":2},{"bytes":483,"dir":1,"interval":2},{"bytes":30,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":56},{"bytes":604,"dir":2,"interval":38},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"is3.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59705,"dip":"125.39.135.218","dport":443,"proto":"tcp","c2s_bytes":2513,"s2c_bytes":4838,"c2s_pkts":13,"s2c_pkts":12,"total_pkts":25,"duration":52876,"packets":[{"bytes":201,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":93},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":3},{"bytes":719,"dir":1,"interval":0},{"bytes":213,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":35},{"bytes":30,"dir":1,"interval":8},{"bytes":608,"dir":2,"interval":186},{"bytes":38,"dir":2,"interval":0},{"bytes":292,"dir":1,"interval":3625},{"bytes":270,"dir":1,"interval":0},{"bytes":461,"dir":2,"interval":3584},{"bytes":38,"dir":2,"interval":0},{"bytes":291,"dir":1,"interval":15187},{"bytes":38,"dir":1,"interval":0},{"bytes":214,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":15060},{"bytes":447,"dir":2,"interval":158},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"z6.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59748,"dip":"27.221.119.230","dport":443,"proto":"tcp","c2s_bytes":2134,"s2c_bytes":20196,"c2s_pkts":5,"s2c_pkts":24,"total_pkts":29,"duration":23091,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":14},{"bytes":69,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":168},{"bytes":45,"dir":1,"interval":11},{"bytes":1460,"dir":1,"interval":295},{"bytes":38,"dir":2,"interval":327},{"bytes":1460,"dir":2,"interval":68},{"bytes":1367,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":642,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":69,"dir":1,"interval":296},{"bytes":1460,"dir":2,"interval":273},{"bytes":1271,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":184,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast3-c-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59699,"dip":"121.18.239.211","dport":443,"proto":"tcp","c2s_bytes":1835,"s2c_bytes":3678,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":61042,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":106},{"bytes":45,"dir":1,"interval":5},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":474,"dir":1,"interval":2},{"bytes":883,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":26},{"bytes":478,"dir":2,"interval":115},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sdfp.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59753,"dip":"113.5.183.221","dport":443,"proto":"tcp","c2s_bytes":1454,"s2c_bytes":8545,"c2s_pkts":7,"s2c_pkts":12,"total_pkts":19,"duration":11074,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":194},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":737,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":116},{"bytes":689,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":26,"dir":2,"interval":0},{"bytes":250,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ib-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59622,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":4147,"s2c_bytes":12906,"c2s_pkts":33,"s2c_pkts":57,"total_pkts":90,"duration":113022,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":362},{"bytes":45,"dir":1,"interval":44},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":253,"dir":1,"interval":0},{"bytes":133,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":132,"dir":1,"interval":0},{"bytes":129,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":122},{"bytes":375,"dir":2,"interval":4},{"bytes":48,"dir":2,"interval":0},{"bytes":285,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":325,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":311,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":370,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":138,"dir":1,"interval":2668},{"bytes":340,"dir":2,"interval":2664},{"bytes":48,"dir":2,"interval":0},{"bytes":138,"dir":1,"interval":1316},{"bytes":136,"dir":1,"interval":0},{"bytes":325,"dir":2,"interval":1315},{"bytes":48,"dir":2,"interval":0},{"bytes":275,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":114},{"bytes":373,"dir":2,"interval":111},{"bytes":48,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":210},{"bytes":131,"dir":1,"interval":1},{"bytes":314,"dir":2,"interval":209},{"bytes":48,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":4},{"bytes":285,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":313,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":137,"dir":1,"interval":292},{"bytes":377,"dir":2,"interval":290},{"bytes":48,"dir":2,"interval":0},{"bytes":135,"dir":1,"interval":615},{"bytes":291,"dir":2,"interval":615},{"bytes":48,"dir":2,"interval":0},{"bytes":140,"dir":1,"interval":1130},{"bytes":275,"dir":2,"interval":1130},{"bytes":48,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":45143},{"bytes":38,"dir":1,"interval":0},{"bytes":284,"dir":2,"interval":45158},{"bytes":48,"dir":2,"interval":0},{"bytes":130,"dir":1,"interval":19},{"bytes":46,"dir":2,"interval":3},{"bytes":370,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":133,"dir":1,"interval":1975},{"bytes":372,"dir":2,"interval":1972},{"bytes":48,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":5987},{"bytes":371,"dir":2,"interval":5987},{"bytes":48,"dir":2,"interval":0},{"bytes":130,"dir":1,"interval":2006},{"bytes":366,"dir":2,"interval":2014},{"bytes":48,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":1993},{"bytes":369,"dir":2,"interval":1989},{"bytes":48,"dir":2,"interval":0},{"bytes":134,"dir":1,"interval":24012},{"bytes":38,"dir":1,"interval":0},{"bytes":374,"dir":2,"interval":24008},{"bytes":48,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":2},{"bytes":136,"dir":1,"interval":1996},{"bytes":380,"dir":2,"interval":1993},{"bytes":48,"dir":2,"interval":0},{"bytes":131,"dir":1,"interval":12006},{"bytes":38,"dir":1,"interval":0},{"bytes":314,"dir":2,"interval":12006},{"bytes":48,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59632,"dip":"139.215.192.211","dport":443,"proto":"tcp","c2s_bytes":952,"s2c_bytes":6799,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":112463,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":418},{"bytes":45,"dir":1,"interval":13},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":2},{"bytes":472,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":120},{"bytes":1460,"dir":2,"interval":69},{"bytes":170,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":506,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dm-hl.toutiao.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59702,"dip":"27.221.119.229","dport":443,"proto":"tcp","c2s_bytes":2117,"s2c_bytes":4402,"c2s_pkts":9,"s2c_pkts":10,"total_pkts":19,"duration":59088,"packets":[{"bytes":208,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":14},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":128},{"bytes":45,"dir":1,"interval":10},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":35},{"bytes":688,"dir":1,"interval":31},{"bytes":627,"dir":2,"interval":136},{"bytes":38,"dir":2,"interval":0},{"bytes":908,"dir":1,"interval":33799},{"bytes":38,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":33712},{"bytes":491,"dir":2,"interval":15},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"abtest-ch.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50885,"dip":"182.18.72.137","dport":443,"proto":"tcp","c2s_bytes":3421,"s2c_bytes":32324,"c2s_pkts":12,"s2c_pkts":29,"total_pkts":41,"duration":46718,"packets":[{"bytes":530,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":569,"dir":1,"interval":91},{"bytes":58,"dir":1,"interval":5},{"bytes":280,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":21},{"bytes":287,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":20},{"bytes":1448,"dir":2,"interval":0},{"bytes":995,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":1876},{"bytes":1448,"dir":2,"interval":1875},{"bytes":1448,"dir":2,"interval":0},{"bytes":1104,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":5726},{"bytes":1448,"dir":2,"interval":5727},{"bytes":1448,"dir":2,"interval":0},{"bytes":156,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":3193},{"bytes":1448,"dir":2,"interval":3193},{"bytes":1448,"dir":2,"interval":0},{"bytes":74,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":11024},{"bytes":1448,"dir":2,"interval":11026},{"bytes":1448,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":3271},{"bytes":1448,"dir":2,"interval":3267},{"bytes":1448,"dir":2,"interval":0},{"bytes":1126,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":4506},{"bytes":1448,"dir":2,"interval":4506},{"bytes":1448,"dir":2,"interval":0},{"bytes":533,"dir":2,"interval":0},{"bytes":280,"dir":1,"interval":7225},{"bytes":1448,"dir":2,"interval":7227},{"bytes":1448,"dir":2,"interval":0},{"bytes":553,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":9793}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":59770,"dip":"220.243.131.102","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":52,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":33},{"bytes":274,"dir":2,"interval":31},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59665,"dip":"119.249.58.214","dport":443,"proto":"tcp","c2s_bytes":862,"s2c_bytes":3895,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":108351,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":319},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":383,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":69},{"bytes":434,"dir":2,"interval":22},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":133}],"tls":{"version":"tls1.2","sni":"api-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59779,"dip":"123.125.22.241","dport":443,"proto":"tcp","c2s_bytes":289,"s2c_bytes":4116,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":30,"packets":[{"bytes":196,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":869,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":11},{"bytes":258,"dir":2,"interval":12},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api.weibo.cn","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59778,"dip":"123.125.22.241","dport":443,"proto":"tcp","c2s_bytes":289,"s2c_bytes":4116,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":32,"packets":[{"bytes":196,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":869,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":14},{"bytes":258,"dir":2,"interval":14},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api.weibo.cn","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59782,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":489,"s2c_bytes":281847,"c2s_pkts":5,"s2c_pkts":195,"total_pkts":200,"duration":0,"packets":[{"bytes":142,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1351,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":32},{"bytes":6,"dir":1,"interval":0},{"bytes":53,"dir":1,"interval":0},{"bytes":59,"dir":2,"interval":27},{"bytes":213,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":117,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"face.t.sinajs.cn","alpn":"","cipher_suites":["c024","c023","c00a","c009","c008","c028","c027","c014","c013","c012","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,5,18,23]}}
{"sip":"192.168.50.193","sport":59777,"dip":"123.125.22.241","dport":443,"proto":"tcp","c2s_bytes":27230,"s2c_bytes":181276,"c2s_pkts":47,"s2c_pkts":153,"total_pkts":200,"duration":0,"packets":[{"bytes":196,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":869,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":8},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":24},{"bytes":56,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":70,"dir":1,"interval":0},{"bytes":526,"dir":1,"interval":0},{"bytes":532,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":23},{"bytes":414,"dir":2,"interval":21},{"bytes":419,"dir":2,"interval":7},{"bytes":1074,"dir":2,"interval":0},{"bytes":585,"dir":1,"interval":606},{"bytes":42,"dir":2,"interval":578},{"bytes":164,"dir":1,"interval":2},{"bytes":544,"dir":2,"interval":107},{"bytes":667,"dir":1,"interval":324},{"bytes":512,"dir":1,"interval":634},{"bytes":488,"dir":2,"interval":893},{"bytes":549,"dir":1,"interval":257},{"bytes":559,"dir":1,"interval":157},{"bytes":829,"dir":2,"interval":384},{"bytes":755,"dir":2,"interval":89},{"bytes":617,"dir":1,"interval":142},{"bytes":420,"dir":2,"interval":80},{"bytes":509,"dir":1,"interval":52},{"bytes":1071,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":17},{"bytes":622,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":22},{"bytes":393,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":546,"dir":1,"interval":52},{"bytes":557,"dir":1,"interval":0},{"bytes":357,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":33},{"bytes":395,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":566,"dir":1,"interval":39},{"bytes":603,"dir":1,"interval":30},{"bytes":1218,"dir":2,"interval":49},{"bytes":567,"dir":1,"interval":32},{"bytes":923,"dir":2,"interval":32},{"bytes":399,"dir":2,"interval":15},{"bytes":543,"dir":1,"interval":96},{"bytes":505,"dir":1,"interval":1},{"bytes":511,"dir":1,"interval":14},{"bytes":62,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":96},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":504,"dir":1,"interval":44},{"bytes":508,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":246,"dir":2,"interval":0},{"bytes":624,"dir":2,"interval":0},{"bytes":579,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":969,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":914,"dir":1,"interval":85},{"bytes":552,"dir":1,"interval":9},{"bytes":248,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":52},{"bytes":723,"dir":1,"interval":4},{"bytes":1181,"dir":2,"interval":25},{"bytes":660,"dir":1,"interval":93},{"bytes":623,"dir":1,"interval":0},{"bytes":1384,"dir":2,"interval":88},{"bytes":1460,"dir":2,"interval":12},{"bytes":111,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":1155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":251},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":973,"dir":2,"interval":0},{"bytes":835,"dir":1,"interval":559},{"bytes":1460,"dir":2,"interval":214},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":550,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":710,"dir":1,"interval":60},{"bytes":1460,"dir":2,"interval":54},{"bytes":1460,"dir":2,"interval":0},{"bytes":803,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":588,"dir":1,"interval":336},{"bytes":1460,"dir":1,"interval":0},{"bytes":270,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":309},{"bytes":365,"dir":2,"interval":37},{"bytes":547,"dir":1,"interval":832},{"bytes":1460,"dir":1,"interval":0},{"bytes":1430,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1}],"tls":{"version":"tls1.2","sni":"api.weibo.cn","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59668,"dip":"61.240.132.227","dport":443,"proto":"tcp","c2s_bytes":2192,"s2c_bytes":3759,"c2s_pkts":11,"s2c_pkts":10,"total_pkts":21,"duration":120407,"packets":[{"bytes":211,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":32},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":307},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":389,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":47},{"bytes":221,"dir":2,"interval":67},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":186},{"bytes":646,"dir":1,"interval":74280},{"bytes":38,"dir":1,"interval":0},{"bytes":583,"dir":1,"interval":2029},{"bytes":50,"dir":1,"interval":7960},{"bytes":46,"dir":2,"interval":120007},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast3-c-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50926,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":2276,"s2c_bytes":272489,"c2s_pkts":7,"s2c_pkts":193,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1450,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":71},{"bytes":339,"dir":1,"interval":0},{"bytes":239,"dir":2,"interval":72},{"bytes":239,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1186,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":169},{"bytes":1460,"dir":2,"interval":121},{"bytes":80,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":503,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":357},{"bytes":1460,"dir":2,"interval":376},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1095,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":1890},{"bytes":1460,"dir":2,"interval":1866},{"bytes":1460,"dir":2,"interval":0},{"bytes":86,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":29},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":364,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":565}],"tls":{"version":"tls1.2","sni":"wx4.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50915,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":2630,"s2c_bytes":272386,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":90},{"bytes":43,"dir":2,"interval":84},{"bytes":338,"dir":1,"interval":13},{"bytes":1460,"dir":2,"interval":16},{"bytes":83,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":73},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":7,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":2772},{"bytes":1460,"dir":2,"interval":2690},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":777,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":2120},{"bytes":1460,"dir":2,"interval":2118},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":881,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":520},{"bytes":1460,"dir":2,"interval":518},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":655,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":177},{"bytes":1460,"dir":2,"interval":175},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1346,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":492},{"bytes":1460,"dir":2,"interval":491},{"bytes":1460,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":94},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wx2.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50937,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":940,"s2c_bytes":285433,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":690,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":68},{"bytes":43,"dir":2,"interval":61},{"bytes":338,"dir":1,"interval":148},{"bytes":1460,"dir":2,"interval":150},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":88},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":78},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":34},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":108},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":45},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":149},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":81},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":187},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"k.us.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50939,"dip":"203.208.43.66","dport":443,"proto":"tcp","c2s_bytes":1028,"s2c_bytes":4274,"c2s_pkts":9,"s2c_pkts":8,"total_pkts":17,"duration":768,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":379,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":289},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":229,"dir":1,"interval":0},{"bytes":564,"dir":2,"interval":274},{"bytes":31,"dir":2,"interval":0},{"bytes":334,"dir":2,"interval":13},{"bytes":31,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":347},{"bytes":39,"dir":1,"interval":0},{"bytes":24,"dir":1,"interval":127}],"tls":{"version":"tls1.2","sni":"app-measurement.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50947,"dip":"123.125.31.238","dport":443,"proto":"tcp","c2s_bytes":1663,"s2c_bytes":5963,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":87,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1221,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":25},{"bytes":51,"dir":2,"interval":25},{"bytes":335,"dir":1,"interval":47},{"bytes":462,"dir":1,"interval":1},{"bytes":311,"dir":2,"interval":52},{"bytes":31,"dir":1,"interval":10}],"tls":{"version":"tls1.2","sni":"sdkapp.uve.weibo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50944,"dip":"203.208.43.66","dport":443,"proto":"tcp","c2s_bytes":1457,"s2c_bytes":4227,"c2s_pkts":10,"s2c_pkts":8,"total_pkts":18,"duration":183,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":379,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":107},{"bytes":46,"dir":1,"interval":12},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":150,"dir":1,"interval":0},{"bytes":508,"dir":1,"interval":0},{"bytes":564,"dir":2,"interval":92},{"bytes":31,"dir":1,"interval":33},{"bytes":31,"dir":2,"interval":12},{"bytes":287,"dir":2,"interval":12},{"bytes":31,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":39,"dir":1,"interval":21},{"bytes":24,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"app-measurement.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50949,"dip":"123.125.31.238","dport":443,"proto":"tcp","c2s_bytes":1663,"s2c_bytes":5963,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":49,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1221,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":18},{"bytes":51,"dir":2,"interval":17},{"bytes":335,"dir":1,"interval":4},{"bytes":462,"dir":1,"interval":0},{"bytes":311,"dir":2,"interval":20},{"bytes":31,"dir":1,"interval":23}],"tls":{"version":"tls1.2","sni":"sdkapp.uve.weibo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59637,"dip":"113.5.183.1","dport":443,"proto":"tcp","c2s_bytes":4215,"s2c_bytes":4716,"c2s_pkts":16,"s2c_pkts":14,"total_pkts":30,"duration":130931,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":429},{"bytes":45,"dir":1,"interval":10},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":1},{"bytes":962,"dir":1,"interval":0},{"bytes":332,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":130},{"bytes":565,"dir":2,"interval":74},{"bytes":38,"dir":2,"interval":0},{"bytes":509,"dir":1,"interval":10386},{"bytes":38,"dir":1,"interval":0},{"bytes":667,"dir":1,"interval":0},{"bytes":485,"dir":1,"interval":0},{"bytes":169,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":10340},{"bytes":382,"dir":2,"interval":46},{"bytes":38,"dir":2,"interval":0},{"bytes":370,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":486,"dir":1,"interval":80495},{"bytes":38,"dir":1,"interval":0},{"bytes":50,"dir":1,"interval":10006},{"bytes":46,"dir":2,"interval":120000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ib-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50930,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":3306,"s2c_bytes":269943,"c2s_pkts":10,"s2c_pkts":190,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":126},{"bytes":43,"dir":2,"interval":119},{"bytes":338,"dir":1,"interval":302},{"bytes":1460,"dir":2,"interval":306},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":214,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1810},{"bytes":1460,"dir":2,"interval":1804},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1253,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":158},{"bytes":1460,"dir":2,"interval":160},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":923,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":221},{"bytes":1460,"dir":2,"interval":216},{"bytes":1460,"dir":2,"interval":0},{"bytes":80,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1255,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":252},{"bytes":1460,"dir":2,"interval":249},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1458,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1362},{"bytes":1460,"dir":2,"interval":1358},{"bytes":81,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":682,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":149},{"bytes":1460,"dir":2,"interval":145},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1279,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":4223},{"bytes":1460,"dir":2,"interval":4221},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wx1.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50921,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":4320,"s2c_bytes":257181,"c2s_pkts":13,"s2c_pkts":187,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":39},{"bytes":43,"dir":2,"interval":32},{"bytes":338,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1095,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1511},{"bytes":1460,"dir":2,"interval":1518},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":925,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":527},{"bytes":1460,"dir":2,"interval":518},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":2133},{"bytes":1460,"dir":2,"interval":2130},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":484,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":191},{"bytes":1460,"dir":2,"interval":191},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":368,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":408},{"bytes":1460,"dir":2,"interval":407},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":77,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":861,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":241},{"bytes":1460,"dir":2,"interval":239},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":703,"dir":2,"interval":26},{"bytes":338,"dir":1,"interval":419},{"bytes":1460,"dir":2,"interval":387},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":4996},{"bytes":1460,"dir":2,"interval":4995},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":865,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":112},{"bytes":1460,"dir":2,"interval":111},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":629,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1071},{"bytes":1460,"dir":2,"interval":1070},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1124,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wx3.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50976,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":4298,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":267,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":131},{"bytes":43,"dir":2,"interval":127}],"tls":{"version":"tls1.2","sni":"tva1.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50928,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":5505,"s2c_bytes":95213,"c2s_pkts":15,"s2c_pkts":79,"total_pkts":94,"duration":16047,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":88},{"bytes":43,"dir":2,"interval":76},{"bytes":407,"dir":1,"interval":92},{"bytes":1460,"dir":2,"interval":94},{"bytes":1460,"dir":2,"interval":0},{"bytes":170,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":76,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":775},{"bytes":1460,"dir":2,"interval":782},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":635,"dir":2,"interval":0},{"bytes":407,"dir":1,"interval":9763},{"bytes":1460,"dir":2,"interval":9778},{"bytes":166,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1149,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":252},{"bytes":1460,"dir":2,"interval":236},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":196,"dir":2,"interval":0},{"bytes":409,"dir":1,"interval":989},{"bytes":1460,"dir":2,"interval":984},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1033,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":73},{"bytes":1185,"dir":2,"interval":87},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":952,"dir":2,"interval":0},{"bytes":407,"dir":1,"interval":566},{"bytes":1181,"dir":2,"interval":565},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":275,"dir":2,"interval":0},{"bytes":407,"dir":1,"interval":782},{"bytes":1182,"dir":2,"interval":782},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":390,"dir":2,"interval":0},{"bytes":411,"dir":1,"interval":325},{"bytes":1460,"dir":2,"interval":311},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1297,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":243},{"bytes":1460,"dir":2,"interval":243},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":132,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":803},{"bytes":1460,"dir":2,"interval":804},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1418,"dir":2,"interval":0},{"bytes":407,"dir":1,"interval":1020},{"bytes":1460,"dir":2,"interval":1016},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1273,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":273}],"tls":{"version":"tls1.2","sni":"tvax1.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50952,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":2449,"s2c_bytes":113473,"c2s_pkts":8,"s2c_pkts":86,"total_pkts":94,"duration":9757,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":29},{"bytes":43,"dir":2,"interval":23},{"bytes":365,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":8},{"bytes":89,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":364,"dir":1,"interval":4014},{"bytes":1460,"dir":2,"interval":4012},{"bytes":1460,"dir":2,"interval":0},{"bytes":89,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1456,"dir":2,"interval":0},{"bytes":365,"dir":1,"interval":542},{"bytes":1460,"dir":2,"interval":554},{"bytes":1460,"dir":2,"interval":0},{"bytes":90,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":931,"dir":2,"interval":0},{"bytes":365,"dir":1,"interval":2793},{"bytes":1460,"dir":2,"interval":2778},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":363,"dir":2,"interval":0},{"bytes":365,"dir":1,"interval":1862},{"bytes":1460,"dir":2,"interval":1860},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":64},{"bytes":1460,"dir":2,"interval":123},{"bytes":1460,"dir":2,"interval":0},{"bytes":717,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":508}],"tls":{"version":"tls1.2","sni":"img.t.sinajs.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50905,"dip":"123.125.31.238","dport":443,"proto":"tcp","c2s_bytes":1145,"s2c_bytes":7290,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":25220,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1221,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":42},{"bytes":51,"dir":2,"interval":41},{"bytes":279,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":11},{"bytes":147,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":25000},{"bytes":31,"dir":1,"interval":25169}],"tls":{"version":"tls1.2","sni":"sdkapp.uve.weibo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50907,"dip":"123.125.29.209","dport":443,"proto":"tcp","c2s_bytes":1214,"s2c_bytes":10339,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":25197,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1217,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":65},{"bytes":51,"dir":2,"interval":64},{"bytes":348,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":25000},{"bytes":31,"dir":1,"interval":25121}],"tls":{"version":"tls1.2","sni":"dp.im.weibo.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50902,"dip":"17.248.159.140","dport":443,"proto":"tcp","c2s_bytes":1865,"s2c_bytes":1215,"c2s_pkts":5,"s2c_pkts":2,"total_pkts":7,"duration":30925,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":160,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":133},{"bytes":901,"dir":1,"interval":19},{"bytes":365,"dir":1,"interval":1},{"bytes":1055,"dir":2,"interval":240},{"bytes":31,"dir":1,"interval":30769}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50908,"dip":"123.125.31.238","dport":443,"proto":"tcp","c2s_bytes":4975,"s2c_bytes":6026,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":25844,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":152,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":11},{"bytes":756,"dir":1,"interval":9},{"bytes":1460,"dir":1,"interval":8},{"bytes":31,"dir":1,"interval":0},{"bytes":315,"dir":2,"interval":46},{"bytes":753,"dir":1,"interval":557},{"bytes":1376,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":579},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1148,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":25000},{"bytes":31,"dir":1,"interval":25256}],"tls":{"version":"tls1.2","sni":"sdkapp.uve.weibo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50906,"dip":"123.125.22.241","dport":443,"proto":"tcp","c2s_bytes":2868,"s2c_bytes":15575,"c2s_pkts":6,"s2c_pkts":14,"total_pkts":20,"duration":27846,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":903,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":45},{"bytes":51,"dir":2,"interval":44},{"bytes":994,"dir":1,"interval":6},{"bytes":286,"dir":1,"interval":0},{"bytes":1168,"dir":2,"interval":48},{"bytes":947,"dir":1,"interval":2615},{"bytes":1460,"dir":2,"interval":2715},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":25021},{"bytes":31,"dir":1,"interval":25179}],"tls":{"version":"tls1.2","sni":"api.weibo.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50904,"dip":"17.42.254.15","dport":443,"proto":"tcp","c2s_bytes":3359,"s2c_bytes":6393,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":31260,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":9},{"bytes":126,"dir":1,"interval":501},{"bytes":51,"dir":2,"interval":265},{"bytes":1448,"dir":1,"interval":367},{"bytes":600,"dir":1,"interval":0},{"bytes":40,"dir":1,"interval":0},{"bytes":597,"dir":1,"interval":0},{"bytes":1173,"dir":2,"interval":357},{"bytes":31,"dir":1,"interval":30390}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51005,"dip":"203.208.43.73","dport":443,"proto":"tcp","c2s_bytes":1426,"s2c_bytes":4227,"c2s_pkts":10,"s2c_pkts":8,"total_pkts":18,"duration":191,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1379,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":128},{"bytes":46,"dir":1,"interval":1},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":150,"dir":1,"interval":0},{"bytes":477,"dir":1,"interval":0},{"bytes":564,"dir":2,"interval":115},{"bytes":31,"dir":2,"interval":1},{"bytes":31,"dir":1,"interval":43},{"bytes":287,"dir":2,"interval":13},{"bytes":31,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":39,"dir":1,"interval":11},{"bytes":24,"dir":1,"interval":2}],"tls":{"version":"tls1.2","sni":"app-measurement.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50917,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":981,"s2c_bytes":14282,"c2s_pkts":4,"s2c_pkts":12,"total_pkts":16,"duration":30697,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":60},{"bytes":43,"dir":2,"interval":55},{"bytes":356,"dir":1,"interval":31},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":118,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1106,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30601}],"tls":{"version":"tls1.2","sni":"vip.storage.weibo.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50935,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":963,"s2c_bytes":70739,"c2s_pkts":4,"s2c_pkts":50,"total_pkts":54,"duration":30395,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":705,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":85},{"bytes":43,"dir":2,"interval":78},{"bytes":338,"dir":1,"interval":27},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1371,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30282}],"tls":{"version":"tls1.2","sni":"k.us.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51013,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":897,"s2c_bytes":6108,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":47,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":33},{"bytes":292,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":31},{"bytes":287,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":6},{"bytes":250,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":12}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51024,"dip":"31.13.84.8","dport":443,"proto":"tcp","c2s_bytes":1322,"s2c_bytes":4762,"c2s_pkts":9,"s2c_pkts":6,"total_pkts":15,"duration":628,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1114,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":193},{"bytes":252,"dir":2,"interval":126},{"bytes":46,"dir":1,"interval":144},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":118,"dir":1,"interval":0},{"bytes":444,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":38},{"bytes":44,"dir":2,"interval":151},{"bytes":1320,"dir":2,"interval":110},{"bytes":24,"dir":1,"interval":249}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50963,"dip":"123.125.31.238","dport":443,"proto":"tcp","c2s_bytes":2418,"s2c_bytes":5995,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":25141,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1221,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":51},{"bytes":51,"dir":2,"interval":49},{"bytes":1460,"dir":1,"interval":18},{"bytes":92,"dir":1,"interval":0},{"bytes":312,"dir":2,"interval":22},{"bytes":31,"dir":2,"interval":25000},{"bytes":31,"dir":1,"interval":25071}],"tls":{"version":"tls1.2","sni":"sdkclick.uve.weibo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50938,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":963,"s2c_bytes":117706,"c2s_pkts":4,"s2c_pkts":83,"total_pkts":87,"duration":32689,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":690,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":414},{"bytes":43,"dir":2,"interval":363},{"bytes":338,"dir":1,"interval":175},{"bytes":1460,"dir":2,"interval":177},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":269},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":133},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":309},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":542},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":56},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":173,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":32066}],"tls":{"version":"tls1.2","sni":"k.us.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51061,"dip":"31.13.84.8","dport":443,"proto":"tcp","c2s_bytes":1747,"s2c_bytes":3896,"c2s_pkts":9,"s2c_pkts":6,"total_pkts":15,"duration":1245,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1113,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":206},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":136,"dir":1,"interval":0},{"bytes":851,"dir":1,"interval":14},{"bytes":252,"dir":2,"interval":142},{"bytes":44,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":130},{"bytes":455,"dir":2,"interval":751},{"bytes":24,"dir":1,"interval":894}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51070,"dip":"103.216.43.76","dport":443,"proto":"tcp","c2s_bytes":1087,"s2c_bytes":274286,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":76},{"bytes":51,"dir":2,"interval":74},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":47},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":252,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":46},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":96},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":122},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":317,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":376},{"bytes":1460,"dir":2,"interval":135},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":133},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":176},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":73},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"statics-web.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51060,"dip":"31.13.84.8","dport":443,"proto":"tcp","c2s_bytes":1393,"s2c_bytes":3898,"c2s_pkts":9,"s2c_pkts":6,"total_pkts":15,"duration":1859,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1114,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":1244},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":137,"dir":1,"interval":0},{"bytes":496,"dir":1,"interval":0},{"bytes":252,"dir":2,"interval":1179},{"bytes":44,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":223},{"bytes":456,"dir":2,"interval":396},{"bytes":24,"dir":1,"interval":390}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51078,"dip":"103.216.43.78","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":274283,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":120},{"bytes":51,"dir":2,"interval":119},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":155},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":205,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":153},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":110},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":211},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":314,"dir":2,"interval":16},{"bytes":42,"dir":1,"interval":595},{"bytes":1460,"dir":2,"interval":233},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":217},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":152},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":88},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":99},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":101},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":77},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static-d.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50951,"dip":"17.248.160.52","dport":443,"proto":"tcp","c2s_bytes":2615,"s2c_bytes":8416,"c2s_pkts":5,"s2c_pkts":10,"total_pkts":15,"duration":31695,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":600,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":1099,"dir":2,"interval":9},{"bytes":93,"dir":1,"interval":562},{"bytes":51,"dir":2,"interval":342},{"bytes":987,"dir":1,"interval":210},{"bytes":737,"dir":2,"interval":262},{"bytes":987,"dir":1,"interval":621},{"bytes":737,"dir":2,"interval":617},{"bytes":31,"dir":1,"interval":30300}],"tls":{"version":"tls1.2","sni":"p46-mobilebackup.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50950,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1758,"s2c_bytes":6346,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31916,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":971,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":55},{"bytes":43,"dir":2,"interval":54},{"bytes":578,"dir":1,"interval":58},{"bytes":1206,"dir":2,"interval":59},{"bytes":578,"dir":1,"interval":1445},{"bytes":1206,"dir":2,"interval":1445}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51037,"dip":"103.216.43.76","dport":443,"proto":"tcp","c2s_bytes":4148,"s2c_bytes":198004,"c2s_pkts":43,"s2c_pkts":157,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":766},{"bytes":51,"dir":2,"interval":765},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":73},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":229,"dir":1,"interval":0},{"bytes":87,"dir":1,"interval":0},{"bytes":84,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":73},{"bytes":228,"dir":2,"interval":0},{"bytes":227,"dir":2,"interval":0},{"bytes":227,"dir":2,"interval":0},{"bytes":81,"dir":1,"interval":144},{"bytes":227,"dir":2,"interval":144},{"bytes":86,"dir":1,"interval":49},{"bytes":227,"dir":2,"interval":49},{"bytes":81,"dir":1,"interval":17},{"bytes":227,"dir":2,"interval":16},{"bytes":85,"dir":1,"interval":131},{"bytes":227,"dir":2,"interval":132},{"bytes":88,"dir":1,"interval":14},{"bytes":85,"dir":1,"interval":0},{"bytes":1257,"dir":2,"interval":14},{"bytes":1330,"dir":2,"interval":0},{"bytes":90,"dir":1,"interval":87},{"bytes":1460,"dir":2,"interval":87},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":89,"dir":1,"interval":34},{"bytes":94,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":176},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":241},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":224},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":128},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":90,"dir":1,"interval":863},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":53},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":62},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":96,"dir":1,"interval":315},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":118},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":81},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":61},{"bytes":87,"dir":1,"interval":300},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":189,"dir":2,"interval":0},{"bytes":84,"dir":1,"interval":5},{"bytes":1327,"dir":2,"interval":4},{"bytes":84,"dir":1,"interval":139},{"bytes":84,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":139},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":49,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":752,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":71},{"bytes":1460,"dir":2,"interval":70},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":0},{"bytes":86,"dir":1,"interval":38},{"bytes":1137,"dir":2,"interval":6},{"bytes":90,"dir":1,"interval":31},{"bytes":800,"dir":2,"interval":31},{"bytes":83,"dir":1,"interval":39},{"bytes":83,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":587,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":92,"dir":1,"interval":18},{"bytes":1460,"dir":2,"interval":15},{"bytes":926,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":63},{"bytes":394,"dir":2,"interval":0},{"bytes":89,"dir":1,"interval":65},{"bytes":1460,"dir":2,"interval":3},{"bytes":832,"dir":2,"interval":0},{"bytes":82,"dir":1,"interval":17},{"bytes":725,"dir":2,"interval":16},{"bytes":85,"dir":1,"interval":67},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":1331,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":39},{"bytes":87,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":457,"dir":2,"interval":0},{"bytes":911,"dir":2,"interval":0},{"bytes":89,"dir":1,"interval":46},{"bytes":1460,"dir":2,"interval":46},{"bytes":363,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":38},{"bytes":88,"dir":1,"interval":0},{"bytes":1411,"dir":2,"interval":38},{"bytes":932,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":13},{"bytes":917,"dir":2,"interval":12},{"bytes":88,"dir":1,"interval":83},{"bytes":86,"dir":1,"interval":0},{"bytes":916,"dir":2,"interval":83},{"bytes":915,"dir":2,"interval":0},{"bytes":88,"dir":1,"interval":18},{"bytes":1460,"dir":2,"interval":23},{"bytes":267,"dir":2,"interval":0},{"bytes":89,"dir":1,"interval":85}],"tls":{"version":"tls1.2","sni":"m.iqiyipic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59807,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":572,"s2c_bytes":4171,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":5118,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":24},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":21},{"bytes":242,"dir":1,"interval":5},{"bytes":354,"dir":2,"interval":5},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"time.video.iqiyi.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009f","009e","006b","0067","0039","0033","0016","009d","009c","003d","003c","0035","002f","000a","008d","008c","008b"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51020,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":890,"s2c_bytes":4153,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":5485,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":813,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":26},{"bytes":51,"dir":2,"interval":25},{"bytes":249,"dir":1,"interval":182},{"bytes":354,"dir":2,"interval":182},{"bytes":31,"dir":2,"interval":5000},{"bytes":31,"dir":1,"interval":5276}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51035,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1037,"s2c_bytes":4435,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":5520,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":813,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":304},{"bytes":51,"dir":2,"interval":304},{"bytes":396,"dir":1,"interval":69},{"bytes":636,"dir":2,"interval":69},{"bytes":31,"dir":2,"interval":4998},{"bytes":31,"dir":1,"interval":5145}],"tls":{"version":"tls1.2","sni":"cdndata.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50957,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":918,"s2c_bytes":4597,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":30879,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":108},{"bytes":335,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":107},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":84,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30769}],"tls":{"version":"tls1.2","sni":"simg.s.weibo.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50936,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1296,"s2c_bytes":15134,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":36917,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1320,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":72},{"bytes":43,"dir":2,"interval":69},{"bytes":327,"dir":1,"interval":66},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":99},{"bytes":524,"dir":2,"interval":46},{"bytes":344,"dir":1,"interval":5758},{"bytes":1460,"dir":2,"interval":5613},{"bytes":1460,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":31017}],"tls":{"version":"tls1.2","sni":"simg.s.weibo.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51059,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1033,"s2c_bytes":4416,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":5296,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":798,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":40},{"bytes":51,"dir":2,"interval":39},{"bytes":392,"dir":1,"interval":89},{"bytes":632,"dir":2,"interval":90},{"bytes":31,"dir":2,"interval":4999},{"bytes":31,"dir":1,"interval":5166}],"tls":{"version":"tls1.2","sni":"cdndata.video.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51086,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":983,"s2c_bytes":4443,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":5794,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":813,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":149},{"bytes":51,"dir":2,"interval":148},{"bytes":342,"dir":1,"interval":222},{"bytes":644,"dir":2,"interval":224},{"bytes":31,"dir":2,"interval":5003},{"bytes":31,"dir":1,"interval":5421}],"tls":{"version":"tls1.2","sni":"cdndata.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51101,"dip":"180.97.210.149","dport":443,"proto":"tcp","c2s_bytes":1097,"s2c_bytes":272502,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":585,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":525},{"bytes":51,"dir":2,"interval":425},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":361},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":262,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":400,"dir":2,"interval":722},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":133},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":107},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":14},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":18},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":30},{"bytes":621,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":1160},{"bytes":1448,"dir":2,"interval":1126},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":184},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":198},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":35},{"bytes":1448,"dir":2,"interval":138},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":19},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":17},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":226},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":128},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":117},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":17},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":120},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":36},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":214},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":74},{"bytes":1448,"dir":2,"interval":186},{"bytes":1448,"dir":2,"interval":30}],"tls":{"version":"tls1.2","sni":"v-b461d295.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50934,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1616,"s2c_bytes":14322,"c2s_pkts":6,"s2c_pkts":13,"total_pkts":19,"duration":39247,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":43},{"bytes":43,"dir":2,"interval":37},{"bytes":329,"dir":1,"interval":55},{"bytes":1460,"dir":2,"interval":57},{"bytes":1178,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":5904},{"bytes":1460,"dir":2,"interval":5903},{"bytes":533,"dir":2,"interval":0},{"bytes":325,"dir":1,"interval":3067},{"bytes":1460,"dir":2,"interval":3073},{"bytes":1460,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":905,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30175}],"tls":{"version":"tls1.2","sni":"simg.s.weibo.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50969,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1033,"s2c_bytes":12039,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30398,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":49},{"bytes":43,"dir":2,"interval":34},{"bytes":408,"dir":1,"interval":37},{"bytes":1460,"dir":2,"interval":53},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":441,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30310}],"tls":{"version":"tls1.2","sni":"tva4.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51125,"dip":"36.110.134.202","dport":443,"proto":"tcp","c2s_bytes":2775,"s2c_bytes":39254,"c2s_pkts":5,"s2c_pkts":29,"total_pkts":34,"duration":1127,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":84},{"bytes":287,"dir":2,"interval":82},{"bytes":287,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":37},{"bytes":718,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":338},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":1},{"bytes":1452,"dir":2,"interval":29},{"bytes":1452,"dir":2,"interval":136},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":45},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":111},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":103},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":841},{"bytes":1452,"dir":2,"interval":112}],"tls":{"version":"tls1.2","sni":"card-paopao.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50959,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":3879,"s2c_bytes":60534,"c2s_pkts":11,"s2c_pkts":51,"total_pkts":62,"duration":34919,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":111},{"bytes":43,"dir":2,"interval":105},{"bytes":407,"dir":1,"interval":41},{"bytes":1460,"dir":2,"interval":44},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":512,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":2146},{"bytes":1460,"dir":2,"interval":2146},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1450,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":396},{"bytes":1460,"dir":2,"interval":396},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":210},{"bytes":1460,"dir":2,"interval":226},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":167,"dir":2,"interval":0},{"bytes":245,"dir":2,"interval":0},{"bytes":407,"dir":1,"interval":247},{"bytes":1460,"dir":2,"interval":229},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1417,"dir":2,"interval":0},{"bytes":409,"dir":1,"interval":228},{"bytes":1263,"dir":2,"interval":241},{"bytes":1460,"dir":2,"interval":0},{"bytes":21,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":977,"dir":2,"interval":0},{"bytes":411,"dir":1,"interval":982},{"bytes":1460,"dir":2,"interval":969},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":219,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":252},{"bytes":1460,"dir":2,"interval":269},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1281,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30301}],"tls":{"version":"tls1.2","sni":"tvax2.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50964,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1259,"s2c_bytes":61499,"c2s_pkts":5,"s2c_pkts":45,"total_pkts":50,"duration":34763,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":49},{"bytes":338,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":62},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":811,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":3603},{"bytes":1460,"dir":2,"interval":3815},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1392,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":31105}],"tls":{"version":"tls1.2","sni":"wx3.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50967,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1395,"s2c_bytes":19510,"c2s_pkts":5,"s2c_pkts":16,"total_pkts":21,"duration":33312,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":25},{"bytes":405,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1178,"dir":2,"interval":0},{"bytes":407,"dir":1,"interval":2406},{"bytes":1460,"dir":2,"interval":2420},{"bytes":1185,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":789,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30878}],"tls":{"version":"tls1.2","sni":"tvax4.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50972,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":921,"s2c_bytes":14740,"c2s_pkts":4,"s2c_pkts":12,"total_pkts":16,"duration":31007,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":9},{"bytes":338,"dir":1,"interval":0},{"bytes":1176,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":291,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30995}],"tls":{"version":"tls1.2","sni":"wx3.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50968,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1607,"s2c_bytes":39008,"c2s_pkts":6,"s2c_pkts":31,"total_pkts":37,"duration":33732,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":14},{"bytes":358,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":451,"dir":2,"interval":0},{"bytes":335,"dir":1,"interval":3388},{"bytes":1460,"dir":2,"interval":3387},{"bytes":1460,"dir":2,"interval":0},{"bytes":111,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1263,"dir":2,"interval":0},{"bytes":331,"dir":1,"interval":196},{"bytes":1460,"dir":2,"interval":195},{"bytes":107,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":443,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30131}],"tls":{"version":"tls1.2","sni":"h5.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50919,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":3867,"s2c_bytes":74761,"c2s_pkts":11,"s2c_pkts":60,"total_pkts":71,"duration":49063,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":34},{"bytes":43,"dir":2,"interval":29},{"bytes":407,"dir":1,"interval":27},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":524,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":12674},{"bytes":1460,"dir":2,"interval":12672},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1374,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":652},{"bytes":1460,"dir":2,"interval":652},{"bytes":163,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":152},{"bytes":1460,"dir":2,"interval":162},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":2,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":143},{"bytes":1460,"dir":2,"interval":131},{"bytes":163,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":121,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":564},{"bytes":1460,"dir":2,"interval":580},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":272,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":1668},{"bytes":1460,"dir":2,"interval":1651},{"bytes":163,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":872,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":1980},{"bytes":1460,"dir":2,"interval":1997},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":934,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":31167}],"tls":{"version":"tls1.2","sni":"tvax4.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50987,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":988,"s2c_bytes":12120,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":31100,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":148,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":90},{"bytes":405,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":90},{"bytes":1460,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":127,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":31008}],"tls":{"version":"tls1.2","sni":"tvax1.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50990,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":992,"s2c_bytes":6766,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30970,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":61},{"bytes":409,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":70},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":793,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30901}],"tls":{"version":"tls1.2","sni":"tvax1.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50901,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":3290,"s2c_bytes":9242,"c2s_pkts":7,"s2c_pkts":12,"total_pkts":19,"duration":60245,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1370,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":67},{"bytes":51,"dir":2,"interval":64},{"bytes":73,"dir":2,"interval":0},{"bytes":583,"dir":1,"interval":66},{"bytes":1440,"dir":1,"interval":0},{"bytes":548,"dir":1,"interval":0},{"bytes":542,"dir":2,"interval":70},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":16},{"bytes":31,"dir":2,"interval":60000},{"bytes":31,"dir":1,"interval":60094}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50927,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":6099,"s2c_bytes":177126,"c2s_pkts":19,"s2c_pkts":138,"total_pkts":157,"duration":49810,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":109},{"bytes":43,"dir":2,"interval":98},{"bytes":331,"dir":1,"interval":71},{"bytes":1460,"dir":2,"interval":72},{"bytes":109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":254,"dir":2,"interval":0},{"bytes":358,"dir":1,"interval":776},{"bytes":1460,"dir":2,"interval":777},{"bytes":1460,"dir":2,"interval":0},{"bytes":458,"dir":2,"interval":0},{"bytes":354,"dir":1,"interval":4026},{"bytes":1460,"dir":2,"interval":4020},{"bytes":1221,"dir":2,"interval":0},{"bytes":358,"dir":1,"interval":4153},{"bytes":1460,"dir":2,"interval":4153},{"bytes":105,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1201,"dir":2,"interval":0},{"bytes":335,"dir":1,"interval":776},{"bytes":1460,"dir":2,"interval":776},{"bytes":110,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":431},{"bytes":1460,"dir":2,"interval":432},{"bytes":1181,"dir":2,"interval":0},{"bytes":358,"dir":1,"interval":179},{"bytes":1460,"dir":2,"interval":179},{"bytes":1460,"dir":2,"interval":0},{"bytes":490,"dir":2,"interval":0},{"bytes":336,"dir":1,"interval":368},{"bytes":1460,"dir":2,"interval":367},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":60,"dir":2,"interval":0},{"bytes":348,"dir":1,"interval":660},{"bytes":1460,"dir":2,"interval":659},{"bytes":105,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":470,"dir":2,"interval":0},{"bytes":331,"dir":1,"interval":1044},{"bytes":1460,"dir":2,"interval":1044},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":331,"dir":1,"interval":1103},{"bytes":1460,"dir":2,"interval":1101},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1060,"dir":2,"interval":0},{"bytes":331,"dir":1,"interval":477},{"bytes":1460,"dir":2,"interval":478},{"bytes":1460,"dir":2,"interval":0},{"bytes":106,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":340,"dir":2,"interval":0},{"bytes":335,"dir":1,"interval":1068},{"bytes":1460,"dir":2,"interval":1067},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":454,"dir":2,"interval":0},{"bytes":331,"dir":1,"interval":391},{"bytes":1460,"dir":2,"interval":386},{"bytes":1460,"dir":2,"interval":0},{"bytes":109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":383,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":580},{"bytes":1460,"dir":2,"interval":584},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":354,"dir":2,"interval":0},{"bytes":333,"dir":1,"interval":3064},{"bytes":1460,"dir":2,"interval":3067},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30408}],"tls":{"version":"tls1.2","sni":"h5.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50991,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1031,"s2c_bytes":15694,"c2s_pkts":4,"s2c_pkts":12,"total_pkts":16,"duration":30298,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":37},{"bytes":43,"dir":2,"interval":29},{"bytes":406,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30135}],"tls":{"version":"tls1.2","sni":"tva1.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51066,"dip":"123.125.111.85","dport":443,"proto":"tcp","c2s_bytes":1255,"s2c_bytes":4758,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":15144,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":110},{"bytes":287,"dir":2,"interval":108},{"bytes":287,"dir":2,"interval":0},{"bytes":650,"dir":1,"interval":13},{"bytes":352,"dir":2,"interval":21},{"bytes":24,"dir":1,"interval":15005}],"tls":{"version":"tls1.2","sni":"subscription.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51133,"dip":"36.110.134.202","dport":443,"proto":"tcp","c2s_bytes":2840,"s2c_bytes":41703,"c2s_pkts":6,"s2c_pkts":31,"total_pkts":37,"duration":5294,"packets":[{"bytes":582,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":44},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":122,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":41},{"bytes":1452,"dir":2,"interval":246},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":39},{"bytes":1452,"dir":2,"interval":108},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":15},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":6},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":126},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":54},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":17},{"bytes":1452,"dir":2,"interval":0},{"bytes":535,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":5233}],"tls":{"version":"tls1.2","sni":"card-paopao.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51019,"dip":"123.125.111.71","dport":443,"proto":"tcp","c2s_bytes":2216,"s2c_bytes":5272,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":16153,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":49},{"bytes":772,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":45},{"bytes":287,"dir":2,"interval":0},{"bytes":238,"dir":2,"interval":15},{"bytes":839,"dir":1,"interval":1853},{"bytes":628,"dir":2,"interval":1857},{"bytes":24,"dir":1,"interval":14234}],"tls":{"version":"tls1.2","sni":"paopao.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51021,"dip":"123.125.111.71","dport":443,"proto":"tcp","c2s_bytes":1492,"s2c_bytes":4987,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":16068,"packets":[{"bytes":577,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":172},{"bytes":827,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":168},{"bytes":271,"dir":2,"interval":0},{"bytes":628,"dir":2,"interval":17},{"bytes":24,"dir":1,"interval":15881}],"tls":{"version":"tls1.2","sni":"paopao.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51022,"dip":"123.125.111.71","dport":443,"proto":"tcp","c2s_bytes":1492,"s2c_bytes":4987,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":16069,"packets":[{"bytes":577,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":172},{"bytes":827,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":168},{"bytes":271,"dir":2,"interval":0},{"bytes":628,"dir":2,"interval":15},{"bytes":24,"dir":1,"interval":15881}],"tls":{"version":"tls1.2","sni":"paopao.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51009,"dip":"49.7.32.101","dport":443,"proto":"tcp","c2s_bytes":1577,"s2c_bytes":4819,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":16770,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":33},{"bytes":714,"dir":1,"interval":0},{"bytes":258,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":26},{"bytes":271,"dir":2,"interval":0},{"bytes":445,"dir":2,"interval":7},{"bytes":24,"dir":1,"interval":16721}],"tls":{"version":"tls1.2","sni":"iqid.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51083,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":2828,"s2c_bytes":7557,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":14741,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":174},{"bytes":51,"dir":2,"interval":173},{"bytes":1452,"dir":1,"interval":132},{"bytes":596,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":194},{"bytes":1452,"dir":2,"interval":0},{"bytes":867,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":14417}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51088,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":2831,"s2c_bytes":4333,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":14604,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":169},{"bytes":51,"dir":2,"interval":167},{"bytes":705,"dir":1,"interval":926},{"bytes":1452,"dir":1,"interval":-144},{"bytes":547,"dir":2,"interval":932},{"bytes":31,"dir":1,"interval":13638}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51017,"dip":"36.110.224.70","dport":443,"proto":"tcp","c2s_bytes":1234,"s2c_bytes":6571,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":16326,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":18},{"bytes":629,"dir":1,"interval":1},{"bytes":287,"dir":2,"interval":14},{"bytes":287,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":12},{"bytes":713,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":16290}],"tls":{"version":"tls1.2","sni":"sns-follow.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51124,"dip":"36.110.238.127","dport":443,"proto":"tcp","c2s_bytes":2181,"s2c_bytes":11536,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":6904,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":84},{"bytes":788,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":83},{"bytes":271,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":7},{"bytes":1452,"dir":2,"interval":0},{"bytes":677,"dir":2,"interval":0},{"bytes":788,"dir":1,"interval":1082},{"bytes":1452,"dir":2,"interval":1081},{"bytes":1452,"dir":2,"interval":0},{"bytes":677,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":5720}],"tls":{"version":"tls1.2","sni":"imo.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51128,"dip":"36.110.238.127","dport":443,"proto":"tcp","c2s_bytes":2181,"s2c_bytes":11522,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":6734,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":200},{"bytes":788,"dir":1,"interval":1},{"bytes":271,"dir":2,"interval":194},{"bytes":271,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":8},{"bytes":1452,"dir":2,"interval":0},{"bytes":677,"dir":2,"interval":0},{"bytes":788,"dir":1,"interval":797},{"bytes":1452,"dir":2,"interval":796},{"bytes":1452,"dir":2,"interval":0},{"bytes":678,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":5720}],"tls":{"version":"tls1.2","sni":"imo.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51127,"dip":"36.110.238.127","dport":443,"proto":"tcp","c2s_bytes":2181,"s2c_bytes":11521,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":6734,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":200},{"bytes":788,"dir":1,"interval":1},{"bytes":271,"dir":2,"interval":195},{"bytes":271,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":7},{"bytes":1452,"dir":2,"interval":0},{"bytes":677,"dir":2,"interval":0},{"bytes":788,"dir":1,"interval":807},{"bytes":1452,"dir":2,"interval":805},{"bytes":1452,"dir":2,"interval":0},{"bytes":677,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":5710}],"tls":{"version":"tls1.2","sni":"imo.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51023,"dip":"49.7.32.101","dport":443,"proto":"tcp","c2s_bytes":1094,"s2c_bytes":4816,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":16070,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":912,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":174},{"bytes":489,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":159},{"bytes":287,"dir":2,"interval":0},{"bytes":410,"dir":2,"interval":9},{"bytes":24,"dir":1,"interval":15879}],"tls":{"version":"tls1.2","sni":"control-i.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51053,"dip":"111.202.75.30","dport":443,"proto":"tcp","c2s_bytes":1055,"s2c_bytes":4423,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":15493,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":564,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":60},{"bytes":450,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":58},{"bytes":287,"dir":2,"interval":0},{"bytes":381,"dir":2,"interval":4},{"bytes":24,"dir":1,"interval":15415}],"tls":{"version":"tls1.2","sni":"puma-api.ptqy.gitv.tv","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51018,"dip":"111.206.70.136","dport":443,"proto":"tcp","c2s_bytes":2188,"s2c_bytes":5913,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":16197,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":15},{"bytes":784,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":14},{"bytes":287,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":17},{"bytes":799,"dir":1,"interval":1289},{"bytes":1140,"dir":2,"interval":1275},{"bytes":24,"dir":1,"interval":14875}],"tls":{"version":"tls1.2","sni":"sns-paopao.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51077,"dip":"111.206.70.136","dport":443,"proto":"tcp","c2s_bytes":1388,"s2c_bytes":5494,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":14811,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":897,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":115},{"bytes":271,"dir":2,"interval":113},{"bytes":271,"dir":2,"interval":0},{"bytes":783,"dir":1,"interval":226},{"bytes":1135,"dir":2,"interval":245},{"bytes":24,"dir":1,"interval":14451}],"tls":{"version":"tls1.2","sni":"sns-paopao.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51032,"dip":"111.202.75.174","dport":443,"proto":"tcp","c2s_bytes":1225,"s2c_bytes":4719,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":15876,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":145},{"bytes":620,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":144},{"bytes":287,"dir":2,"interval":0},{"bytes":313,"dir":2,"interval":12},{"bytes":24,"dir":1,"interval":15712}],"tls":{"version":"tls1.2","sni":"community.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51015,"dip":"123.125.84.212","dport":443,"proto":"tcp","c2s_bytes":4695,"s2c_bytes":90716,"c2s_pkts":8,"s2c_pkts":66,"total_pkts":74,"duration":16381,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":952,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":17},{"bytes":1452,"dir":1,"interval":0},{"bytes":574,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":15},{"bytes":271,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":186},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":2},{"bytes":1440,"dir":2,"interval":2},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":6},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":10},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":5},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":6},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":6},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":27},{"bytes":1333,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":4739},{"bytes":596,"dir":1,"interval":0},{"bytes":16,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":4662},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":75},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":106},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":33,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":11608}],"tls":{"version":"tls1.2","sni":"cards.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51016,"dip":"123.125.84.232","dport":443,"proto":"tcp","c2s_bytes":1631,"s2c_bytes":5932,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":16349,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":21},{"bytes":544,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":19},{"bytes":287,"dir":2,"interval":0},{"bytes":842,"dir":2,"interval":10},{"bytes":482,"dir":1,"interval":1356},{"bytes":684,"dir":2,"interval":1353},{"bytes":24,"dir":1,"interval":14955}],"tls":{"version":"tls1.2","sni":"search.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51049,"dip":"111.202.75.121","dport":443,"proto":"tcp","c2s_bytes":5015,"s2c_bytes":4931,"c2s_pkts":11,"s2c_pkts":8,"total_pkts":19,"duration":15494,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":95},{"bytes":462,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":95},{"bytes":287,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":64},{"bytes":596,"dir":1,"interval":-55},{"bytes":44,"dir":1,"interval":0},{"bytes":175,"dir":2,"interval":64},{"bytes":478,"dir":1,"interval":367},{"bytes":450,"dir":1,"interval":0},{"bytes":175,"dir":2,"interval":313},{"bytes":478,"dir":1,"interval":281},{"bytes":450,"dir":1,"interval":40},{"bytes":175,"dir":2,"interval":320},{"bytes":24,"dir":1,"interval":14689}],"tls":{"version":"tls1.2","sni":"c-uaa.if.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51063,"dip":"111.202.75.121","dport":443,"proto":"tcp","c2s_bytes":1595,"s2c_bytes":4534,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":14010,"packets":[{"bytes":579,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1097,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":187},{"bytes":478,"dir":1,"interval":0},{"bytes":450,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":185},{"bytes":271,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":13810}],"tls":{"version":"tls1.2","sni":"c-uaa.if.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51072,"dip":"103.44.58.150","dport":443,"proto":"tcp","c2s_bytes":1256,"s2c_bytes":5122,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":14927,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":73},{"bytes":651,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":72},{"bytes":287,"dir":2,"interval":0},{"bytes":716,"dir":2,"interval":6},{"bytes":24,"dir":1,"interval":14841}],"tls":{"version":"tls1.2","sni":"act.vip.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51080,"dip":"103.44.58.150","dport":443,"proto":"tcp","c2s_bytes":1278,"s2c_bytes":4997,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":14776,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":128},{"bytes":673,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":125},{"bytes":271,"dir":2,"interval":0},{"bytes":638,"dir":2,"interval":4},{"bytes":24,"dir":1,"interval":14635}],"tls":{"version":"tls1.2","sni":"act.vip.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51082,"dip":"103.44.58.150","dport":443,"proto":"tcp","c2s_bytes":1278,"s2c_bytes":5010,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":14749,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":149},{"bytes":673,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":147},{"bytes":271,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":3},{"bytes":24,"dir":1,"interval":14586}],"tls":{"version":"tls1.2","sni":"act.vip.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51081,"dip":"103.44.58.150","dport":443,"proto":"tcp","c2s_bytes":1278,"s2c_bytes":4983,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":14749,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":180},{"bytes":673,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":176},{"bytes":271,"dir":2,"interval":0},{"bytes":624,"dir":2,"interval":7},{"bytes":24,"dir":1,"interval":14555}],"tls":{"version":"tls1.2","sni":"act.vip.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51076,"dip":"123.125.111.80","dport":443,"proto":"tcp","c2s_bytes":1378,"s2c_bytes":4677,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":14846,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":131},{"bytes":773,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":129},{"bytes":271,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":5},{"bytes":24,"dir":1,"interval":14702}],"tls":{"version":"tls1.2","sni":"l-rcd.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50948,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":5105,"s2c_bytes":101855,"c2s_pkts":14,"s2c_pkts":81,"total_pkts":95,"duration":45818,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":29},{"bytes":43,"dir":2,"interval":23},{"bytes":411,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":7},{"bytes":163,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1251,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":1283},{"bytes":1460,"dir":2,"interval":1283},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":0},{"bytes":779,"dir":2,"interval":0},{"bytes":411,"dir":1,"interval":3847},{"bytes":1460,"dir":2,"interval":3847},{"bytes":163,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":985,"dir":2,"interval":0},{"bytes":407,"dir":1,"interval":391},{"bytes":1460,"dir":2,"interval":389},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":1094},{"bytes":1460,"dir":2,"interval":1110},{"bytes":169,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":869,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":342},{"bytes":1460,"dir":2,"interval":325},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":464,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":2273},{"bytes":1460,"dir":2,"interval":2273},{"bytes":1460,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":493,"dir":2,"interval":0},{"bytes":409,"dir":1,"interval":261},{"bytes":1460,"dir":2,"interval":274},{"bytes":1460,"dir":2,"interval":0},{"bytes":164,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":407,"dir":1,"interval":210},{"bytes":1460,"dir":2,"interval":197},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":685,"dir":2,"interval":0},{"bytes":409,"dir":1,"interval":1849},{"bytes":1460,"dir":2,"interval":1848},{"bytes":1460,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1446,"dir":2,"interval":0},{"bytes":406,"dir":1,"interval":4060},{"bytes":1460,"dir":2,"interval":4059},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1311,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30169}],"tls":{"version":"tls1.2","sni":"tvax3.sinaimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50933,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":3963,"s2c_bytes":210816,"c2s_pkts":13,"s2c_pkts":157,"total_pkts":170,"duration":50189,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":362},{"bytes":338,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":355},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":171,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":8968},{"bytes":1460,"dir":2,"interval":8980},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1351,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":975},{"bytes":1460,"dir":2,"interval":960},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":92,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":139},{"bytes":1460,"dir":2,"interval":140},{"bytes":75,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":3548},{"bytes":1460,"dir":2,"interval":3545},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":115,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1550},{"bytes":1180,"dir":2,"interval":1575},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1380},{"bytes":1460,"dir":2,"interval":1354},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":88},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":635,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1768},{"bytes":1460,"dir":2,"interval":1635},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":180,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":871},{"bytes":1460,"dir":2,"interval":868},{"bytes":81,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":610,"dir":2,"interval":1},{"bytes":338,"dir":1,"interval":335},{"bytes":1460,"dir":2,"interval":341},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":185,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30293}],"tls":{"version":"tls1.2","sni":"wx2.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50922,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":3667,"s2c_bytes":205032,"c2s_pkts":12,"s2c_pkts":153,"total_pkts":165,"duration":52281,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1320,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":29},{"bytes":43,"dir":2,"interval":24},{"bytes":338,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":7},{"bytes":78,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":4338},{"bytes":1460,"dir":2,"interval":4336},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":6079},{"bytes":1460,"dir":2,"interval":6076},{"bytes":1460,"dir":2,"interval":0},{"bytes":78,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":456,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1420},{"bytes":1460,"dir":2,"interval":1431},{"bytes":1460,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":390,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":728},{"bytes":1460,"dir":2,"interval":715},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":380,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":3076},{"bytes":1176,"dir":2,"interval":3203},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":521,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1068},{"bytes":1460,"dir":2,"interval":968},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":4541},{"bytes":1460,"dir":2,"interval":4513},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":32},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":62},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":32},{"bytes":1362,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":637},{"bytes":1460,"dir":2,"interval":455},{"bytes":80,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":83,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30359}],"tls":{"version":"tls1.2","sni":"wx3.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50994,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":947,"s2c_bytes":7047,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30441,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":148,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":136},{"bytes":364,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":137},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1059,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30302}],"tls":{"version":"tls1.2","sni":"img.t.sinajs.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50940,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":3625,"s2c_bytes":239733,"c2s_pkts":12,"s2c_pkts":175,"total_pkts":187,"duration":46975,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":174},{"bytes":338,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":174},{"bytes":1460,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":376},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":269,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":6926},{"bytes":1460,"dir":2,"interval":6520},{"bytes":81,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1080,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":118},{"bytes":1460,"dir":2,"interval":103},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1162,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":3633},{"bytes":1460,"dir":2,"interval":3633},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":80,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":469,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":2588},{"bytes":1460,"dir":2,"interval":2590},{"bytes":1460,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1170,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":265},{"bytes":1460,"dir":2,"interval":261},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1013,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":2272},{"bytes":1460,"dir":2,"interval":2266},{"bytes":80,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":24},{"bytes":1108,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":368},{"bytes":1460,"dir":2,"interval":338},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":20,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":412},{"bytes":1460,"dir":2,"interval":409},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":703,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30216}],"tls":{"version":"tls1.2","sni":"wx1.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50929,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":3995,"s2c_bytes":243609,"c2s_pkts":13,"s2c_pkts":174,"total_pkts":187,"duration":50733,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1435,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":130},{"bytes":339,"dir":1,"interval":0},{"bytes":239,"dir":2,"interval":123},{"bytes":239,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":194,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":474},{"bytes":1460,"dir":2,"interval":469},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1246,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":1993},{"bytes":1460,"dir":2,"interval":1995},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1446,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":7302},{"bytes":1460,"dir":2,"interval":7191},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1085,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":424},{"bytes":1460,"dir":2,"interval":421},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":4,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":562},{"bytes":1460,"dir":2,"interval":566},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1040,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":148},{"bytes":1460,"dir":2,"interval":142},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":712,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":3605},{"bytes":1460,"dir":2,"interval":3846},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":748,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":4593},{"bytes":1460,"dir":2,"interval":4352},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1451,"dir":2,"interval":0},{"bytes":339,"dir":1,"interval":1020},{"bytes":1460,"dir":2,"interval":1014},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30479}],"tls":{"version":"tls1.2","sni":"wx4.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50999,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1032,"s2c_bytes":17803,"c2s_pkts":4,"s2c_pkts":14,"total_pkts":18,"duration":30770,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1320,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":260},{"bytes":43,"dir":2,"interval":256},{"bytes":407,"dir":1,"interval":62},{"bytes":1460,"dir":2,"interval":63},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":380,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30445}],"tls":{"version":"tls1.2","sni":"tvax3.sinaimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51159,"dip":"103.216.43.51","dport":443,"proto":"tcp","c2s_bytes":1191,"s2c_bytes":267687,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":585,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":19},{"bytes":51,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":4},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":356,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":17},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":12},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":466,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":51},{"bytes":39,"dir":2,"interval":14},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":14},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":28},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":13},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":46},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b33.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50925,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":1413,"s2c_bytes":266884,"c2s_pkts":4,"s2c_pkts":185,"total_pkts":189,"duration":58411,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":503,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":15},{"bytes":43,"dir":2,"interval":11},{"bytes":788,"dir":1,"interval":10},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":738,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":58373}],"tls":{"version":"tls1.2","sni":"ugc.cp31.ott.cibntv.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51158,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1022,"s2c_bytes":4519,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":5140,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":813,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":13},{"bytes":51,"dir":2,"interval":12},{"bytes":381,"dir":1,"interval":7},{"bytes":720,"dir":2,"interval":7},{"bytes":31,"dir":2,"interval":4999},{"bytes":31,"dir":1,"interval":5119}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51165,"dip":"103.216.43.39","dport":443,"proto":"tcp","c2s_bytes":1189,"s2c_bytes":268649,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":585,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":47},{"bytes":51,"dir":2,"interval":45},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":10},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":354,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":9},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":14},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":40},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":465,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":148},{"bytes":39,"dir":2,"interval":86},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":60},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":12},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":34},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":19},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":29},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b27.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60045,"dip":"103.44.58.40","dport":443,"proto":"tcp","c2s_bytes":1419,"s2c_bytes":17430,"c2s_pkts":6,"s2c_pkts":15,"total_pkts":21,"duration":5682,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":815,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":222},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":225},{"bytes":1057,"dir":1,"interval":184},{"bytes":1460,"dir":2,"interval":222},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":473,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4993},{"bytes":31,"dir":1,"interval":5275}],"tls":{"version":"tls1.2","sni":"cache.video.iqiyi.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009f","009e","006b","0067","0039","0033","0016","009d","009c","003d","003c","0035","002f","000a","008d","008c","008b"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51007,"dip":"17.42.254.14","dport":443,"proto":"tcp","c2s_bytes":3294,"s2c_bytes":1320,"c2s_pkts":7,"s2c_pkts":3,"total_pkts":10,"duration":31153,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":4},{"bytes":51,"dir":1,"interval":475},{"bytes":1448,"dir":1,"interval":2},{"bytes":600,"dir":1,"interval":0},{"bytes":40,"dir":1,"interval":0},{"bytes":607,"dir":1,"interval":0},{"bytes":1173,"dir":2,"interval":250},{"bytes":31,"dir":1,"interval":30674}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51033,"dip":"111.202.75.117","dport":443,"proto":"tcp","c2s_bytes":1855,"s2c_bytes":8741,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":30689,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":145},{"bytes":620,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":142},{"bytes":287,"dir":2,"interval":0},{"bytes":876,"dir":2,"interval":18},{"bytes":630,"dir":1,"interval":286},{"bytes":1460,"dir":2,"interval":277},{"bytes":1460,"dir":2,"interval":0},{"bytes":539,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30252}],"tls":{"version":"tls1.2","sni":"api-yuedu.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51039,"dip":"111.202.75.117","dport":443,"proto":"tcp","c2s_bytes":1229,"s2c_bytes":4744,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30376,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":897,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":198},{"bytes":624,"dir":1,"interval":-79},{"bytes":271,"dir":2,"interval":197},{"bytes":271,"dir":2,"interval":0},{"bytes":385,"dir":2,"interval":11},{"bytes":24,"dir":1,"interval":30252}],"tls":{"version":"tls1.2","sni":"api-yuedu.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51038,"dip":"111.202.75.117","dport":443,"proto":"tcp","c2s_bytes":1227,"s2c_bytes":6165,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":30376,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":897,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":81},{"bytes":622,"dir":1,"interval":0},{"bytes":271,"dir":2,"interval":79},{"bytes":271,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":346,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30290}],"tls":{"version":"tls1.2","sni":"api-yuedu.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51028,"dip":"106.38.219.16","dport":443,"proto":"tcp","c2s_bytes":1081,"s2c_bytes":6743,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":30682,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":166},{"bytes":476,"dir":1,"interval":2},{"bytes":287,"dir":2,"interval":164},{"bytes":287,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":12},{"bytes":885,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30507}],"tls":{"version":"tls1.2","sni":"emoticon-sns.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51030,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":1209,"s2c_bytes":5371,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30799,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":153},{"bytes":51,"dir":2,"interval":152},{"bytes":535,"dir":1,"interval":161},{"bytes":1452,"dir":2,"interval":167},{"bytes":118,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30481}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51026,"dip":"49.7.32.101","dport":443,"proto":"tcp","c2s_bytes":1003,"s2c_bytes":4846,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31199,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1112,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":146},{"bytes":398,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":145},{"bytes":287,"dir":2,"interval":0},{"bytes":440,"dir":2,"interval":19},{"bytes":24,"dir":1,"interval":31046}],"tls":{"version":"tls1.2","sni":"du-feige.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51040,"dip":"49.7.32.101","dport":443,"proto":"tcp","c2s_bytes":1272,"s2c_bytes":952,"c2s_pkts":3,"s2c_pkts":3,"total_pkts":6,"duration":30886,"packets":[{"bytes":579,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":669,"dir":1,"interval":704},{"bytes":287,"dir":2,"interval":706},{"bytes":440,"dir":2,"interval":4},{"bytes":24,"dir":1,"interval":30175}],"tls":{"version":"tls1.2","sni":"du-feige.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51169,"dip":"103.216.43.58","dport":443,"proto":"tcp","c2s_bytes":1190,"s2c_bytes":272509,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":585,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":343},{"bytes":51,"dir":2,"interval":379},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":115},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":355,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":77},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":97},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":55},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":30},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":27},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":72},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":40},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":23},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":62},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":422},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":990,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":106},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":95},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":48},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":93},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":31},{"bytes":1448,"dir":2,"interval":68},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":57},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":15},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":26},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":89},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":60},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":162},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":12},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":45},{"bytes":1448,"dir":2,"interval":498},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":107},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":30},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":94},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":34},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":59},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":22},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":33},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b3a.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51098,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":2916,"s2c_bytes":10164,"c2s_pkts":6,"s2c_pkts":9,"total_pkts":15,"duration":31095,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":189},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":263,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":186},{"bytes":287,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":40},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1402,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30904}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51136,"dip":"103.216.43.75","dport":443,"proto":"tcp","c2s_bytes":3852,"s2c_bytes":211253,"c2s_pkts":41,"s2c_pkts":159,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":33},{"bytes":51,"dir":2,"interval":32},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":22},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":242,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1057,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":13203},{"bytes":1460,"dir":2,"interval":13204},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":159,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":583},{"bytes":1460,"dir":2,"interval":582},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":378,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":77},{"bytes":1460,"dir":2,"interval":76},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1247,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":654},{"bytes":1460,"dir":2,"interval":625},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1383,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":99,"dir":1,"interval":657},{"bytes":1460,"dir":2,"interval":657},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":734,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":101},{"bytes":1460,"dir":2,"interval":102},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":437,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":3030},{"bytes":1460,"dir":2,"interval":3030},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":110},{"bytes":1460,"dir":2,"interval":108},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":55,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":460},{"bytes":1460,"dir":2,"interval":461},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":351,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":190},{"bytes":1460,"dir":2,"interval":189},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":234,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":43},{"bytes":1460,"dir":2,"interval":73},{"bytes":1460,"dir":2,"interval":215},{"bytes":100,"dir":1,"interval":512},{"bytes":100,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":267},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":105},{"bytes":1460,"dir":2,"interval":108},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":26},{"bytes":1460,"dir":2,"interval":78},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":149},{"bytes":100,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":93},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":76},{"bytes":1460,"dir":2,"interval":185},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":168},{"bytes":1460,"dir":2,"interval":56},{"bytes":1460,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":13},{"bytes":100,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":100,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":109},{"bytes":1460,"dir":2,"interval":111},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":17},{"bytes":42,"dir":1,"interval":5},{"bytes":42,"dir":1,"interval":88},{"bytes":100,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":109},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":85},{"bytes":98,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":85},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":57},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":95}],"tls":{"version":"tls1.2","sni":"img7.iqiyipic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51163,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1403,"s2c_bytes":5239,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":7411,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":813,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":19},{"bytes":51,"dir":2,"interval":18},{"bytes":381,"dir":1,"interval":5},{"bytes":720,"dir":2,"interval":6},{"bytes":381,"dir":1,"interval":2376},{"bytes":720,"dir":2,"interval":2376},{"bytes":31,"dir":2,"interval":4999},{"bytes":31,"dir":1,"interval":5009}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51111,"dip":"118.26.96.6","dport":443,"proto":"tcp","c2s_bytes":1947,"s2c_bytes":4763,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30897,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":101},{"bytes":1342,"dir":1,"interval":1},{"bytes":271,"dir":2,"interval":100},{"bytes":271,"dir":2,"interval":0},{"bytes":389,"dir":2,"interval":5},{"bytes":24,"dir":1,"interval":30790}],"tls":{"version":"tls1.2","sni":"iface.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60097,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":920,"s2c_bytes":5228,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":631,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":766,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":3},{"bytes":45,"dir":1,"interval":594},{"bytes":700,"dir":1,"interval":29},{"bytes":1285,"dir":2,"interval":226},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009f","009e","006b","0067","0039","0033","0016","009d","009c","003d","003c","0035","002f","000a","008d","008c","008b"],"extensions_list":[10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51115,"dip":"123.125.84.212","dport":443,"proto":"tcp","c2s_bytes":2887,"s2c_bytes":11761,"c2s_pkts":6,"s2c_pkts":11,"total_pkts":17,"duration":30631,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":897,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":197},{"bytes":271,"dir":2,"interval":196},{"bytes":271,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":26},{"bytes":596,"dir":1,"interval":0},{"bytes":234,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":62},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30326}],"tls":{"version":"tls1.2","sni":"cards.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51186,"dip":"103.216.43.52","dport":443,"proto":"tcp","c2s_bytes":1224,"s2c_bytes":267954,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":149},{"bytes":53,"dir":1,"interval":21},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":356,"dir":1,"interval":22},{"bytes":38,"dir":1,"interval":3},{"bytes":398,"dir":2,"interval":201},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":592,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":156},{"bytes":39,"dir":2,"interval":89},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":9},{"bytes":71,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b34.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60099,"dip":"103.216.43.54","dport":443,"proto":"tcp","c2s_bytes":1096,"s2c_bytes":282668,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":544,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":45,"dir":1,"interval":123},{"bytes":876,"dir":1,"interval":35},{"bytes":1448,"dir":2,"interval":1180},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009f","009e","006b","0067","0039","0033","0016","009d","009c","003d","003c","0035","002f","000a","008d","008c","008b"],"extensions_list":[10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51112,"dip":"123.125.84.212","dport":443,"proto":"tcp","c2s_bytes":5109,"s2c_bytes":28233,"c2s_pkts":9,"s2c_pkts":22,"total_pkts":31,"duration":34090,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":334},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":221,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":331},{"bytes":287,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":64},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":118},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1366,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":2853},{"bytes":596,"dir":1,"interval":0},{"bytes":187,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":2718},{"bytes":561,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30901}],"tls":{"version":"tls1.2","sni":"cards.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51116,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":4763,"s2c_bytes":1622,"c2s_pkts":9,"s2c_pkts":4,"total_pkts":13,"duration":33458,"packets":[{"bytes":577,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":69},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":1,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":68},{"bytes":380,"dir":2,"interval":9},{"bytes":1452,"dir":1,"interval":2538},{"bytes":596,"dir":1,"interval":0},{"bytes":1,"dir":1,"interval":0},{"bytes":730,"dir":2,"interval":2541},{"bytes":24,"dir":1,"interval":30847}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51114,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":4766,"s2c_bytes":11575,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":33759,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":105},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":29,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":102},{"bytes":287,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":14},{"bytes":1452,"dir":2,"interval":0},{"bytes":658,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":2687},{"bytes":596,"dir":1,"interval":0},{"bytes":36,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":2697},{"bytes":1452,"dir":2,"interval":0},{"bytes":703,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30961}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51185,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1024,"s2c_bytes":4714,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":5154,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":785,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":123},{"bytes":381,"dir":1,"interval":26},{"bytes":720,"dir":2,"interval":61},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60098,"dip":"103.216.43.54","dport":443,"proto":"tcp","c2s_bytes":1000,"s2c_bytes":5367,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":5165,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":544,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":45,"dir":1,"interval":147},{"bytes":780,"dir":1,"interval":12},{"bytes":1448,"dir":2,"interval":94},{"bytes":206,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009f","009e","006b","0067","0039","0033","0016","009d","009c","003d","003c","0035","002f","000a","008d","008c","008b"],"extensions_list":[10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51134,"dip":"49.7.32.7","dport":443,"proto":"tcp","c2s_bytes":968,"s2c_bytes":4802,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30453,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1112,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":36},{"bytes":363,"dir":1,"interval":2},{"bytes":271,"dir":2,"interval":35},{"bytes":271,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":12},{"bytes":24,"dir":1,"interval":30408}],"tls":{"version":"tls1.2","sni":"pan.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51008,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":29330,"s2c_bytes":27429,"c2s_pkts":36,"s2c_pkts":28,"total_pkts":64,"duration":46352,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":17},{"bytes":51,"dir":2,"interval":15},{"bytes":1452,"dir":1,"interval":21},{"bytes":482,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":31},{"bytes":1452,"dir":1,"interval":396},{"bytes":480,"dir":1,"interval":0},{"bytes":782,"dir":2,"interval":394},{"bytes":1452,"dir":1,"interval":232},{"bytes":175,"dir":1,"interval":0},{"bytes":296,"dir":2,"interval":244},{"bytes":1452,"dir":1,"interval":543},{"bytes":596,"dir":1,"interval":0},{"bytes":269,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":544},{"bytes":6,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":172},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":56},{"bytes":1452,"dir":2,"interval":231},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1106,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":186},{"bytes":596,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":1145,"dir":2,"interval":171},{"bytes":590,"dir":1,"interval":184},{"bytes":1006,"dir":2,"interval":182},{"bytes":1452,"dir":1,"interval":118},{"bytes":596,"dir":1,"interval":0},{"bytes":104,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":120},{"bytes":685,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":107},{"bytes":596,"dir":1,"interval":0},{"bytes":103,"dir":1,"interval":0},{"bytes":625,"dir":2,"interval":104},{"bytes":1452,"dir":1,"interval":170},{"bytes":596,"dir":1,"interval":0},{"bytes":103,"dir":1,"interval":0},{"bytes":625,"dir":2,"interval":169},{"bytes":1452,"dir":1,"interval":536},{"bytes":596,"dir":1,"interval":0},{"bytes":137,"dir":1,"interval":0},{"bytes":214,"dir":2,"interval":538},{"bytes":1452,"dir":1,"interval":3063},{"bytes":394,"dir":1,"interval":0},{"bytes":417,"dir":2,"interval":3061},{"bytes":1452,"dir":1,"interval":10170},{"bytes":372,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":10198},{"bytes":436,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30376}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51012,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":12378,"s2c_bytes":37639,"c2s_pkts":19,"s2c_pkts":30,"total_pkts":49,"duration":46303,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":13},{"bytes":51,"dir":2,"interval":9},{"bytes":652,"dir":1,"interval":13},{"bytes":698,"dir":2,"interval":20},{"bytes":1452,"dir":1,"interval":1462},{"bytes":596,"dir":1,"interval":0},{"bytes":254,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":1539},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":83},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":250,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":341},{"bytes":596,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":1145,"dir":2,"interval":180},{"bytes":1452,"dir":1,"interval":81},{"bytes":596,"dir":1,"interval":0},{"bytes":107,"dir":1,"interval":0},{"bytes":294,"dir":2,"interval":79},{"bytes":1452,"dir":1,"interval":115},{"bytes":596,"dir":1,"interval":0},{"bytes":266,"dir":1,"interval":0},{"bytes":1151,"dir":2,"interval":118},{"bytes":1452,"dir":1,"interval":13898},{"bytes":596,"dir":1,"interval":0},{"bytes":94,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":13913},{"bytes":1275,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30376}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59769,"dip":"220.243.131.102","dport":443,"proto":"tcp","c2s_bytes":1204,"s2c_bytes":4367,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":90376,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":20},{"bytes":274,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":31},{"bytes":56,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":24},{"bytes":263,"dir":1,"interval":1},{"bytes":142,"dir":1,"interval":0},{"bytes":319,"dir":2,"interval":5},{"bytes":48,"dir":2,"interval":0},{"bytes":370,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":60132,"dip":"103.216.43.54","dport":443,"proto":"tcp","c2s_bytes":1097,"s2c_bytes":283146,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":544,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":309},{"bytes":877,"dir":1,"interval":33},{"bytes":1448,"dir":2,"interval":133},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009f","009e","006b","0067","0039","0033","0016","009d","009c","003d","003c","0035","002f","000a","008d","008c","008b"],"extensions_list":[10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51180,"dip":"106.38.212.86","dport":443,"proto":"tcp","c2s_bytes":7139,"s2c_bytes":71524,"c2s_pkts":11,"s2c_pkts":53,"total_pkts":64,"duration":21196,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":116},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":130,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":111},{"bytes":287,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":113},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":18},{"bytes":1452,"dir":2,"interval":35},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":7},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":6},{"bytes":1270,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":3153},{"bytes":596,"dir":1,"interval":0},{"bytes":130,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":3116},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":28},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":54},{"bytes":1452,"dir":2,"interval":0},{"bytes":339,"dir":2,"interval":0},{"bytes":726,"dir":1,"interval":4019},{"bytes":1452,"dir":1,"interval":-31},{"bytes":1452,"dir":2,"interval":3934},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":161},{"bytes":1452,"dir":2,"interval":1109},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":169,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":13938}],"tls":{"version":"tls1.2","sni":"card-paopao.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50924,"dip":"106.11.208.145","dport":443,"proto":"tcp","c2s_bytes":1200,"s2c_bytes":8176,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":90604,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":1},{"bytes":1452,"dir":2,"interval":0},{"bytes":365,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":29},{"bytes":51,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":15},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":374,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":14},{"bytes":653,"dir":2,"interval":20}],"tls":{"version":"tls1.2","sni":"api.youku.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51217,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3996,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":568,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":818,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51225,"dip":"104.124.232.195","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3779,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":468,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":94}],"tls":{"version":"tls1.2","sni":"xp.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51224,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":734,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51226,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":933,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51227,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":786,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":3},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51238,"dip":"104.124.232.195","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3779,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":309,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":95}],"tls":{"version":"tls1.2","sni":"xp.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51239,"dip":"103.216.43.37","dport":443,"proto":"tcp","c2s_bytes":1495,"s2c_bytes":267483,"c2s_pkts":9,"s2c_pkts":191,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":142},{"bytes":53,"dir":1,"interval":15},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":368,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":35},{"bytes":38,"dir":1,"interval":1},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":86,"dir":2,"interval":0},{"bytes":259,"dir":1,"interval":56},{"bytes":1448,"dir":2,"interval":55},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":951,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":49},{"bytes":39,"dir":2,"interval":41},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b25.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51237,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":859,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":35},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51240,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":889,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":18},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51236,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1429,"s2c_bytes":5434,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5370,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":785,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":106},{"bytes":405,"dir":1,"interval":6},{"bytes":720,"dir":2,"interval":29},{"bytes":381,"dir":1,"interval":252},{"bytes":720,"dir":2,"interval":252},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59839,"dip":"49.7.32.31","dport":443,"proto":"tcp","c2s_bytes":1018,"s2c_bytes":5944,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":71077,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":130},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":127},{"bytes":659,"dir":1,"interval":137},{"bytes":1452,"dir":2,"interval":148},{"bytes":675,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":70003},{"bytes":31,"dir":1,"interval":70809}],"tls":{"version":"tls1.2","sni":"puma-api.iqiyi.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009f","009e","006b","0067","0039","0033","0016","009d","009c","003d","003c","0035","002f","000a","008d","008c","008b"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":59773,"dip":"101.72.206.228","dport":443,"proto":"tcp","c2s_bytes":29856,"s2c_bytes":4439,"c2s_pkts":28,"s2c_pkts":16,"total_pkts":44,"duration":120536,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":22},{"bytes":234,"dir":2,"interval":20},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":20},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":2},{"bytes":30,"dir":1,"interval":1},{"bytes":955,"dir":1,"interval":2},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":19},{"bytes":34,"dir":2,"interval":10},{"bytes":1174,"dir":1,"interval":57},{"bytes":1460,"dir":1,"interval":149},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":208},{"bytes":1460,"dir":1,"interval":34},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":6},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1},{"bytes":1460,"dir":1,"interval":0},{"bytes":1424,"dir":1,"interval":0},{"bytes":34,"dir":2,"interval":30},{"bytes":34,"dir":2,"interval":6},{"bytes":34,"dir":2,"interval":2},{"bytes":615,"dir":2,"interval":36},{"bytes":30,"dir":2,"interval":0},{"bytes":492,"dir":1,"interval":153},{"bytes":1460,"dir":1,"interval":7},{"bytes":270,"dir":1,"interval":0},{"bytes":395,"dir":2,"interval":154},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120000},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"log-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59771,"dip":"221.195.244.227","dport":443,"proto":"tcp","c2s_bytes":2690,"s2c_bytes":11121,"c2s_pkts":9,"s2c_pkts":18,"total_pkts":27,"duration":120761,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":22},{"bytes":234,"dir":2,"interval":18},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":20},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":20},{"bytes":805,"dir":1,"interval":205},{"bytes":534,"dir":1,"interval":-117},{"bytes":147,"dir":1,"interval":0},{"bytes":622,"dir":2,"interval":234},{"bytes":30,"dir":2,"interval":0},{"bytes":1106,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":738,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":475,"dir":1,"interval":569},{"bytes":956,"dir":2,"interval":434},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120001},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":60298,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":1908,"s2c_bytes":4528,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":226,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":544,"dir":1,"interval":159},{"bytes":1191,"dir":1,"interval":0},{"bytes":893,"dir":2,"interval":157}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":60296,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":1661,"s2c_bytes":12201,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":449,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43},{"bytes":361,"dir":1,"interval":319},{"bytes":1130,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":144},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":174,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1082,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51250,"dip":"183.3.234.190","dport":443,"proto":"tcp","c2s_bytes":998,"s2c_bytes":4717,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":438,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1264,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":332},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":267,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":7},{"bytes":38,"dir":2,"interval":68},{"bytes":170,"dir":2,"interval":43},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":95}],"tls":{"version":"tls1.2","sni":"wuji.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60306,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":1980,"s2c_bytes":3956,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":130,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":64},{"bytes":562,"dir":1,"interval":3},{"bytes":1168,"dir":1,"interval":0},{"bytes":321,"dir":2,"interval":75}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51255,"dip":"103.216.43.53","dport":443,"proto":"tcp","c2s_bytes":1223,"s2c_bytes":270293,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":85},{"bytes":53,"dir":1,"interval":5},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":355,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":16},{"bytes":38,"dir":1,"interval":2},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":951,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":85},{"bytes":39,"dir":2,"interval":80},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b35.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51248,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2402,"s2c_bytes":4026,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":1605,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":1},{"bytes":512,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":12},{"bytes":1440,"dir":1,"interval":1530},{"bytes":414,"dir":1,"interval":0},{"bytes":376,"dir":2,"interval":211},{"bytes":31,"dir":1,"interval":66}],"tls":{"version":"tls1.2","sni":"p.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51261,"dip":"58.60.9.101","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":498,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":44}],"tls":{"version":"tls1.2","sni":"58.60.9.101","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51264,"dip":"64.13.192.76","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4688,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":265,"dir":2,"interval":0},{"bytes":343,"dir":2,"interval":172}],"tls":{"version":"tls1.2","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51263,"dip":"17.42.254.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5220,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":789,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":9},{"bytes":51,"dir":2,"interval":242}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51267,"dip":"58.60.9.101","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":467,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":46}],"tls":{"version":"tls1.2","sni":"58.60.9.101","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51269,"dip":"58.60.9.101","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":518,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"58.60.9.101","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51272,"dip":"113.96.232.166","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":476,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"113.96.232.166","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51273,"dip":"113.96.232.166","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":473,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"113.96.232.166","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51275,"dip":"113.96.232.166","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":592,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"113.96.232.166","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51277,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":524,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":44}],"tls":{"version":"tls1.2","sni":"157.255.192.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51280,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":616,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"157.255.192.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51210,"dip":"123.125.111.70","dport":443,"proto":"tcp","c2s_bytes":2025,"s2c_bytes":4711,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":30987,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":3},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":729},{"bytes":58,"dir":1,"interval":50},{"bytes":903,"dir":1,"interval":0},{"bytes":257,"dir":2,"interval":81},{"bytes":24,"dir":1,"interval":30204}],"tls":{"version":"tls1.2","sni":"nl-rcd.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51279,"dip":"103.216.43.34","dport":443,"proto":"tcp","c2s_bytes":1223,"s2c_bytes":270293,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":778},{"bytes":53,"dir":1,"interval":81},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":355,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":59},{"bytes":397,"dir":2,"interval":374},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1070,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":234},{"bytes":39,"dir":2,"interval":45},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b22.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51281,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":514,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"157.255.192.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60462,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2000,"s2c_bytes":4528,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":633,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":533},{"bytes":562,"dir":1,"interval":35},{"bytes":1188,"dir":1,"interval":0},{"bytes":893,"dir":2,"interval":328}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51282,"dip":"58.251.116.12","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":598,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"58.251.116.12","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51284,"dip":"58.251.116.12","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":786,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"58.251.116.12","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51251,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":2213,"s2c_bytes":6874,"c2s_pkts":6,"s2c_pkts":9,"total_pkts":15,"duration":11821,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":785,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":132},{"bytes":404,"dir":1,"interval":5},{"bytes":720,"dir":2,"interval":31},{"bytes":381,"dir":1,"interval":382},{"bytes":720,"dir":2,"interval":382},{"bytes":404,"dir":1,"interval":3917},{"bytes":720,"dir":2,"interval":3917},{"bytes":381,"dir":1,"interval":2380},{"bytes":720,"dir":2,"interval":2379},{"bytes":31,"dir":2,"interval":4999}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51290,"dip":"58.251.116.12","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":757,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"58.251.116.12","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51219,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":2635,"s2c_bytes":5927,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":30871,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":818,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":1452,"dir":1,"interval":749},{"bytes":596,"dir":1,"interval":0},{"bytes":39,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":137},{"bytes":479,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30117}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51285,"dip":"182.254.52.186","dport":443,"proto":"tcp","c2s_bytes":1521,"s2c_bytes":252948,"c2s_pkts":12,"s2c_pkts":188,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1323,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":701},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":370,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":393},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":178,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":930,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":108},{"bytes":42,"dir":1,"interval":334},{"bytes":1460,"dir":2,"interval":421},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1292,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":79,"dir":1,"interval":497},{"bytes":79,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":494},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":222,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":364,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":84,"dir":1,"interval":29},{"bytes":83,"dir":1,"interval":0},{"bytes":84,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":178,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"puui.qpic.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51274,"dip":"58.250.137.94","dport":443,"proto":"tcp","c2s_bytes":980,"s2c_bytes":4487,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":6350,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":925,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":45},{"bytes":348,"dir":1,"interval":6217},{"bytes":115,"dir":1,"interval":0},{"bytes":408,"dir":2,"interval":901}],"tls":{"version":"tls1.2","sni":"api.poll.aiseet.atianqi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51220,"dip":"111.202.75.129","dport":443,"proto":"tcp","c2s_bytes":3514,"s2c_bytes":51240,"c2s_pkts":7,"s2c_pkts":42,"total_pkts":49,"duration":31946,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1128,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":3},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":356},{"bytes":58,"dir":1,"interval":80},{"bytes":1352,"dir":1,"interval":3},{"bytes":696,"dir":1,"interval":0},{"bytes":344,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":433},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":1},{"bytes":1360,"dir":2,"interval":0},{"bytes":86,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":2},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":86,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":2},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":390,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":31502}],"tls":{"version":"tls1.2","sni":"cards.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51262,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":2124,"s2c_bytes":4653,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":10508,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":2,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":73,"dir":2,"interval":0},{"bytes":429,"dir":1,"interval":467},{"bytes":1147,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":10001}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60574,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2047,"s2c_bytes":4466,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":1139,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":945},{"bytes":622,"dir":1,"interval":128},{"bytes":1175,"dir":1,"interval":0},{"bytes":831,"dir":2,"interval":579}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51208,"dip":"123.125.111.80","dport":443,"proto":"tcp","c2s_bytes":2375,"s2c_bytes":5151,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":37269,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":3},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":812},{"bytes":58,"dir":1,"interval":28},{"bytes":468,"dir":1,"interval":0},{"bytes":410,"dir":2,"interval":44},{"bytes":785,"dir":1,"interval":6303},{"bytes":303,"dir":2,"interval":6305},{"bytes":24,"dir":1,"interval":30120}],"tls":{"version":"tls1.2","sni":"l-rcd.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51046,"dip":"103.44.59.45","dport":443,"proto":"tcp","c2s_bytes":3255,"s2c_bytes":4412,"c2s_pkts":12,"s2c_pkts":10,"total_pkts":22,"duration":92044,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":61},{"bytes":51,"dir":2,"interval":59},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":69},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":122,"dir":1,"interval":0},{"bytes":62,"dir":1,"interval":0},{"bytes":65,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":69},{"bytes":68,"dir":2,"interval":0},{"bytes":686,"dir":1,"interval":4},{"bytes":686,"dir":1,"interval":0},{"bytes":841,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":278,"dir":2,"interval":4},{"bytes":278,"dir":2,"interval":0},{"bytes":278,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"msg.qy.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51300,"dip":"58.60.9.101","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":416,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"58.60.9.101","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51230,"dip":"123.125.84.232","dport":443,"proto":"tcp","c2s_bytes":1604,"s2c_bytes":5138,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31021,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":2},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":678},{"bytes":58,"dir":1,"interval":89},{"bytes":482,"dir":1,"interval":0},{"bytes":684,"dir":2,"interval":189},{"bytes":24,"dir":1,"interval":30249}],"tls":{"version":"tls1.2","sni":"search.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51232,"dip":"111.206.70.136","dport":443,"proto":"tcp","c2s_bytes":1933,"s2c_bytes":5594,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31022,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":2},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":402},{"bytes":58,"dir":1,"interval":77},{"bytes":811,"dir":1,"interval":0},{"bytes":1140,"dir":2,"interval":136},{"bytes":24,"dir":1,"interval":30537}],"tls":{"version":"tls1.2","sni":"sns-paopao.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51231,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":1705,"s2c_bytes":5453,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31023,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":944,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":3},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":678},{"bytes":58,"dir":1,"interval":88},{"bytes":583,"dir":1,"interval":0},{"bytes":999,"dir":2,"interval":189},{"bytes":24,"dir":1,"interval":30254}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51301,"dip":"113.96.232.166","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":441,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"113.96.232.166","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51302,"dip":"113.96.232.166","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":437,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"113.96.232.166","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51102,"dip":"103.44.59.45","dport":443,"proto":"tcp","c2s_bytes":7743,"s2c_bytes":3822,"c2s_pkts":14,"s2c_pkts":8,"total_pkts":22,"duration":91311,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":139},{"bytes":51,"dir":2,"interval":136},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":130},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":168,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":128},{"bytes":42,"dir":2,"interval":0},{"bytes":321,"dir":1,"interval":21},{"bytes":290,"dir":1,"interval":216},{"bytes":336,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":65,"dir":1,"interval":0},{"bytes":270,"dir":2,"interval":238}],"tls":{"version":"tls1.2","sni":"msg.qy.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50946,"dip":"17.248.159.107","dport":443,"proto":"tcp","c2s_bytes":3094,"s2c_bytes":1959,"c2s_pkts":11,"s2c_pkts":5,"total_pkts":16,"duration":123135,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":146},{"bytes":53,"dir":1,"interval":11},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":878,"dir":1,"interval":0},{"bytes":632,"dir":1,"interval":0},{"bytes":69,"dir":2,"interval":81},{"bytes":38,"dir":1,"interval":62},{"bytes":38,"dir":2,"interval":11},{"bytes":1104,"dir":2,"interval":121},{"bytes":169,"dir":1,"interval":1569},{"bytes":633,"dir":1,"interval":0},{"bytes":594,"dir":2,"interval":1629},{"bytes":31,"dir":1,"interval":121345}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51229,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":2891,"s2c_bytes":11189,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":32005,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":818,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":1452,"dir":1,"interval":803},{"bytes":596,"dir":1,"interval":0},{"bytes":295,"dir":1,"interval":87},{"bytes":1452,"dir":2,"interval":363},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1385,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31112}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51234,"dip":"103.44.58.247","dport":443,"proto":"tcp","c2s_bytes":3311,"s2c_bytes":5545,"c2s_pkts":7,"s2c_pkts":6,"total_pkts":13,"duration":31201,"packets":[{"bytes":529,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":3},{"bytes":287,"dir":2,"interval":0},{"bytes":568,"dir":1,"interval":811},{"bytes":58,"dir":1,"interval":25},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":84,"dir":1,"interval":0},{"bytes":1138,"dir":2,"interval":261},{"bytes":24,"dir":1,"interval":30362}],"tls":{"version":"tls1.2","sni":"iface2.iqiyi.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51303,"dip":"113.96.232.166","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":319,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"113.96.232.166","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51304,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":535,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"157.255.192.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51235,"dip":"118.26.96.6","dport":443,"proto":"tcp","c2s_bytes":2695,"s2c_bytes":4843,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":30873,"packets":[{"bytes":616,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":944,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":2},{"bytes":303,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":614},{"bytes":58,"dir":1,"interval":90},{"bytes":1342,"dir":1,"interval":0},{"bytes":389,"dir":2,"interval":209},{"bytes":24,"dir":1,"interval":30165}],"tls":{"version":"tls1.2","sni":"iface.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51306,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":508,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"157.255.192.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51307,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":532,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"157.255.192.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51299,"dip":"58.250.137.69","dport":443,"proto":"tcp","c2s_bytes":1231,"s2c_bytes":4956,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":4908,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1264,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":46},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1196},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":531,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":41},{"bytes":38,"dir":2,"interval":141},{"bytes":409,"dir":2,"interval":59},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"access.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51295,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":1702,"s2c_bytes":4521,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":5391,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1079},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":624,"dir":1,"interval":0},{"bytes":378,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":340},{"bytes":102,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":214}],"tls":{"version":"tls1.2","sni":"btrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51296,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":11498,"s2c_bytes":7111,"c2s_pkts":22,"s2c_pkts":34,"total_pkts":56,"duration":5391,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":949},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1129,"dir":1,"interval":0},{"bytes":753,"dir":1,"interval":0},{"bytes":764,"dir":1,"interval":0},{"bytes":761,"dir":1,"interval":0},{"bytes":750,"dir":1,"interval":0},{"bytes":860,"dir":1,"interval":0},{"bytes":860,"dir":1,"interval":0},{"bytes":415,"dir":1,"interval":0},{"bytes":447,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":392},{"bytes":102,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":3},{"bytes":560,"dir":2,"interval":1},{"bytes":316,"dir":1,"interval":128},{"bytes":1440,"dir":1,"interval":1},{"bytes":384,"dir":1,"interval":3},{"bytes":102,"dir":2,"interval":125},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":138,"dir":1,"interval":826},{"bytes":799,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":821},{"bytes":270,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":90,"dir":1,"interval":19},{"bytes":277,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":12},{"bytes":270,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":90,"dir":1,"interval":467},{"bytes":563,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":460},{"bytes":270,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"btrace.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51308,"dip":"182.254.59.152","dport":443,"proto":"tcp","c2s_bytes":1079,"s2c_bytes":70813,"c2s_pkts":6,"s2c_pkts":56,"total_pkts":62,"duration":762,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1354,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":529},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":379,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":156},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":795,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":829,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":191}],"tls":{"version":"tls1.2","sni":"vfiles.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51286,"dip":"182.254.48.51","dport":443,"proto":"tcp","c2s_bytes":1813,"s2c_bytes":137590,"c2s_pkts":13,"s2c_pkts":108,"total_pkts":121,"duration":7905,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":517},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":342,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":189,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":283},{"bytes":1448,"dir":2,"interval":9},{"bytes":715,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":203,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":990,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1283,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":126},{"bytes":42,"dir":1,"interval":297},{"bytes":84,"dir":1,"interval":427},{"bytes":99,"dir":1,"interval":0},{"bytes":128,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":837},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":668,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1315,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1079,"dir":2,"interval":0},{"bytes":123,"dir":1,"interval":163},{"bytes":1448,"dir":2,"interval":160},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":547,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"vm.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51287,"dip":"182.254.48.51","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":99005,"c2s_pkts":8,"s2c_pkts":76,"total_pkts":84,"duration":7905,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":517},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":342,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":312},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":278,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":990,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":728,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":127},{"bytes":42,"dir":1,"interval":297},{"bytes":1448,"dir":2,"interval":409},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":435},{"bytes":894,"dir":2,"interval":434}],"tls":{"version":"tls1.2","sni":"vm.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51288,"dip":"182.254.52.102","dport":443,"proto":"tcp","c2s_bytes":1043,"s2c_bytes":6183,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":7825,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1708},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":343,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":445},{"bytes":1213,"dir":2,"interval":5},{"bytes":38,"dir":1,"interval":205}],"tls":{"version":"tls1.2","sni":"i.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51283,"dip":"182.254.59.166","dport":443,"proto":"tcp","c2s_bytes":1061,"s2c_bytes":35612,"c2s_pkts":6,"s2c_pkts":29,"total_pkts":35,"duration":9147,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1323,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":744},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":361,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":191},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1413,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":94}],"tls":{"version":"tls1.2","sni":"v.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51309,"dip":"58.251.116.12","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":729,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"58.251.116.12","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60048,"dip":"116.211.202.214","dport":443,"proto":"tcp","c2s_bytes":540,"s2c_bytes":4475,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":72582,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":827,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":272},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":269},{"bytes":208,"dir":1,"interval":51},{"bytes":662,"dir":2,"interval":52},{"bytes":31,"dir":2,"interval":70000},{"bytes":31,"dir":1,"interval":72257}],"tls":{"version":"tls1.2","sni":"","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009f","009e","006b","0067","0039","0033","0016","009d","009c","003d","003c","0035","002f","000a","008d","008c","008b"],"extensions_list":[10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51311,"dip":"58.251.116.12","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":752,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"58.251.116.12","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51314,"dip":"103.216.43.54","dport":443,"proto":"tcp","c2s_bytes":1224,"s2c_bytes":270294,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":227},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":356,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":34},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":952,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":74},{"bytes":39,"dir":2,"interval":67},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b36.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51312,"dip":"58.251.116.12","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":744,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"58.251.116.12","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51315,"dip":"58.60.9.101","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":413,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":45}],"tls":{"version":"tls1.2","sni":"58.60.9.101","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51319,"dip":"58.60.9.101","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":504,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"58.60.9.101","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51316,"dip":"182.254.90.122","dport":443,"proto":"tcp","c2s_bytes":1666,"s2c_bytes":262341,"c2s_pkts":13,"s2c_pkts":187,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":930},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":348,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":6},{"bytes":82,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":269},{"bytes":1448,"dir":2,"interval":29},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1392,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":14},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":22},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"puui.qpic.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51321,"dip":"58.60.9.101","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":466,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"58.60.9.101","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51326,"dip":"220.194.91.117","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":315,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"220.194.91.117","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60804,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2144,"s2c_bytes":3956,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":733,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":651},{"bytes":720,"dir":1,"interval":7},{"bytes":1174,"dir":1,"interval":0},{"bytes":321,"dir":2,"interval":97}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51327,"dip":"220.194.91.117","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":426,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.91.117","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51328,"dip":"220.194.91.117","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":421,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"220.194.91.117","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51291,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":1302,"s2c_bytes":5884,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":11701,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":77,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42},{"bytes":268,"dir":1,"interval":1299},{"bytes":267,"dir":2,"interval":629},{"bytes":300,"dir":1,"interval":264},{"bytes":217,"dir":1,"interval":2},{"bytes":967,"dir":2,"interval":356},{"bytes":31,"dir":2,"interval":10001}],"tls":{"version":"tls1.2","sni":"api.unipay.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51329,"dip":"111.161.111.27","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":143,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"111.161.111.27","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51330,"dip":"111.161.111.27","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":214,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"111.161.111.27","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51332,"dip":"103.216.43.33","dport":443,"proto":"tcp","c2s_bytes":1223,"s2c_bytes":270293,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":71},{"bytes":53,"dir":1,"interval":4},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":355,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":951,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":49},{"bytes":39,"dir":2,"interval":40},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b21.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51331,"dip":"111.161.111.27","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":206,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9}],"tls":{"version":"tls1.2","sni":"111.161.111.27","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51333,"dip":"223.167.154.62","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":406,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":26}],"tls":{"version":"tls1.2","sni":"223.167.154.62","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51334,"dip":"223.167.154.62","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":316,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27}],"tls":{"version":"tls1.2","sni":"223.167.154.62","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51335,"dip":"223.167.154.62","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":370,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":30}],"tls":{"version":"tls1.2","sni":"223.167.154.62","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51336,"dip":"223.167.84.120","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":867,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27}],"tls":{"version":"tls1.2","sni":"223.167.84.120","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51241,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":829,"s2c_bytes":29009,"c2s_pkts":3,"s2c_pkts":24,"total_pkts":27,"duration":30669,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":817,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":44},{"bytes":281,"dir":1,"interval":425},{"bytes":1440,"dir":2,"interval":121},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":179,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":42},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":170,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":810,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30239}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51337,"dip":"223.167.84.120","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":775,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":26}],"tls":{"version":"tls1.2","sni":"223.167.84.120","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51338,"dip":"223.167.84.120","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4615,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":833,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":28}],"tls":{"version":"tls1.2","sni":"223.167.84.120","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51310,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":2213,"s2c_bytes":6874,"c2s_pkts":6,"s2c_pkts":9,"total_pkts":15,"duration":11369,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":785,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":282},{"bytes":404,"dir":1,"interval":66},{"bytes":720,"dir":2,"interval":202},{"bytes":381,"dir":1,"interval":1155},{"bytes":720,"dir":2,"interval":1154},{"bytes":404,"dir":1,"interval":4078},{"bytes":720,"dir":2,"interval":4077},{"bytes":381,"dir":1,"interval":783},{"bytes":720,"dir":2,"interval":783},{"bytes":31,"dir":2,"interval":4999}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60921,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":2051,"s2c_bytes":4145,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":1046,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":46},{"bytes":45,"dir":1,"interval":799},{"bytes":478,"dir":1,"interval":109},{"bytes":1326,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":294},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51322,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":51521,"s2c_bytes":13662,"c2s_pkts":74,"s2c_pkts":126,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":823},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1128,"dir":1,"interval":0},{"bytes":860,"dir":1,"interval":0},{"bytes":860,"dir":1,"interval":0},{"bytes":433,"dir":1,"interval":0},{"bytes":812,"dir":1,"interval":0},{"bytes":826,"dir":1,"interval":0},{"bytes":825,"dir":1,"interval":0},{"bytes":825,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":199},{"bytes":102,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":3},{"bytes":391,"dir":2,"interval":1},{"bytes":486,"dir":1,"interval":67},{"bytes":377,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":61},{"bytes":38,"dir":2,"interval":0},{"bytes":831,"dir":1,"interval":20},{"bytes":102,"dir":2,"interval":20},{"bytes":38,"dir":2,"interval":0},{"bytes":831,"dir":1,"interval":21},{"bytes":830,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":21},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":831,"dir":1,"interval":53},{"bytes":831,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":47},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":8},{"bytes":38,"dir":2,"interval":0},{"bytes":833,"dir":1,"interval":39},{"bytes":102,"dir":2,"interval":30},{"bytes":38,"dir":2,"interval":0},{"bytes":139,"dir":1,"interval":29},{"bytes":799,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":277,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":27},{"bytes":42,"dir":2,"interval":6},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":846,"dir":1,"interval":42},{"bytes":847,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":36},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":855,"dir":1,"interval":35},{"bytes":847,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":28},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":797,"dir":1,"interval":42},{"bytes":102,"dir":2,"interval":36},{"bytes":38,"dir":2,"interval":0},{"bytes":808,"dir":1,"interval":20},{"bytes":819,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":19},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":819,"dir":1,"interval":80},{"bytes":819,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":74},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":833,"dir":1,"interval":153},{"bytes":102,"dir":2,"interval":146},{"bytes":38,"dir":2,"interval":0},{"bytes":854,"dir":1,"interval":77},{"bytes":854,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":78},{"bytes":38,"dir":2,"interval":0},{"bytes":854,"dir":1,"interval":11},{"bytes":855,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":4},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":855,"dir":1,"interval":107},{"bytes":854,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":103},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":811,"dir":1,"interval":26},{"bytes":102,"dir":2,"interval":19},{"bytes":38,"dir":2,"interval":0},{"bytes":818,"dir":1,"interval":46},{"bytes":102,"dir":2,"interval":46},{"bytes":38,"dir":2,"interval":0},{"bytes":832,"dir":1,"interval":10},{"bytes":832,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":11},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":832,"dir":1,"interval":32},{"bytes":832,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":24},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":825,"dir":1,"interval":63},{"bytes":102,"dir":2,"interval":57},{"bytes":38,"dir":2,"interval":0},{"bytes":824,"dir":1,"interval":9},{"bytes":824,"dir":1,"interval":0},{"bytes":824,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":8},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":5},{"bytes":38,"dir":2,"interval":0},{"bytes":818,"dir":1,"interval":13},{"bytes":102,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":805,"dir":1,"interval":57},{"bytes":102,"dir":2,"interval":56},{"bytes":38,"dir":2,"interval":0},{"bytes":818,"dir":1,"interval":19},{"bytes":818,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":19},{"bytes":38,"dir":2,"interval":0},{"bytes":819,"dir":1,"interval":7},{"bytes":826,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":5},{"bytes":38,"dir":2,"interval":0},{"bytes":832,"dir":1,"interval":20},{"bytes":832,"dir":1,"interval":0},{"bytes":832,"dir":1,"interval":0},{"bytes":833,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":15},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":5},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":761,"dir":1,"interval":2864},{"bytes":102,"dir":2,"interval":2876},{"bytes":38,"dir":2,"interval":0},{"bytes":447,"dir":1,"interval":2429},{"bytes":446,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":2411},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":447,"dir":1,"interval":86},{"bytes":102,"dir":2,"interval":80},{"bytes":38,"dir":2,"interval":0},{"bytes":185,"dir":1,"interval":1528},{"bytes":558,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1526},{"bytes":91,"dir":1,"interval":5},{"bytes":798,"dir":1,"interval":0},{"bytes":270,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":91,"dir":1,"interval":6},{"bytes":277,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":6},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":5},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":760,"dir":1,"interval":399},{"bytes":761,"dir":1,"interval":0},{"bytes":750,"dir":1,"interval":0},{"bytes":860,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"btrace.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51347,"dip":"103.216.43.55","dport":443,"proto":"tcp","c2s_bytes":1225,"s2c_bytes":270293,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":71},{"bytes":53,"dir":1,"interval":5},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":357,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":20},{"bytes":38,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":951,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":80},{"bytes":39,"dir":2,"interval":74},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b37.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51003,"dip":"172.217.24.10","dport":443,"proto":"tcp","c2s_bytes":1809,"s2c_bytes":5365,"c2s_pkts":10,"s2c_pkts":8,"total_pkts":18,"duration":121142,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":434,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":184},{"bytes":46,"dir":1,"interval":2},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":161,"dir":1,"interval":0},{"bytes":849,"dir":1,"interval":0},{"bytes":564,"dir":2,"interval":87},{"bytes":31,"dir":2,"interval":2},{"bytes":31,"dir":1,"interval":64},{"bytes":668,"dir":2,"interval":35},{"bytes":188,"dir":2,"interval":0},{"bytes":39,"dir":1,"interval":41},{"bytes":24,"dir":1,"interval":120848}],"tls":{"version":"tls1.2","sni":"firebaselogging.googleapis.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51346,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1428,"s2c_bytes":5434,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5530,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":785,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":467},{"bytes":404,"dir":1,"interval":7},{"bytes":720,"dir":2,"interval":84},{"bytes":381,"dir":1,"interval":49},{"bytes":720,"dir":2,"interval":54},{"bytes":31,"dir":2,"interval":4988}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51278,"dip":"14.215.138.36","dport":443,"proto":"tcp","c2s_bytes":1150,"s2c_bytes":4118,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":31839,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":781,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38},{"bytes":602,"dir":1,"interval":632},{"bytes":383,"dir":2,"interval":398},{"bytes":31,"dir":1,"interval":31202}],"tls":{"version":"tls1.2","sni":"ptlogin.qidian.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51339,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":3790,"s2c_bytes":6248,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":11697,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":77,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43},{"bytes":303,"dir":1,"interval":796},{"bytes":784,"dir":1,"interval":1},{"bytes":813,"dir":2,"interval":307},{"bytes":307,"dir":1,"interval":810},{"bytes":1428,"dir":1,"interval":0},{"bytes":451,"dir":1,"interval":0},{"bytes":785,"dir":2,"interval":768},{"bytes":31,"dir":2,"interval":10000}],"tls":{"version":"tls1.2","sni":"api.unipay.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51352,"dip":"54.250.96.66","dport":443,"proto":"tcp","c2s_bytes":2066,"s2c_bytes":4462,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":1003,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1337,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":207},{"bytes":58,"dir":1,"interval":17},{"bytes":968,"dir":1,"interval":0},{"bytes":514,"dir":2,"interval":67},{"bytes":579,"dir":2,"interval":51}],"tls":{"version":"tls1.2","sni":"securemetrics.apple.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51353,"dip":"104.100.59.222","dport":443,"proto":"tcp","c2s_bytes":1841,"s2c_bytes":4122,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":979,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1427,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":171},{"bytes":1324,"dir":1,"interval":550},{"bytes":405,"dir":2,"interval":208}],"tls":{"version":"tls1.2","sni":"mobileapp.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51354,"dip":"103.216.43.38","dport":443,"proto":"tcp","c2s_bytes":1223,"s2c_bytes":270293,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":126},{"bytes":53,"dir":1,"interval":13},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":355,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":29},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":951,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":30},{"bytes":39,"dir":2,"interval":24},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b26.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51351,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1428,"s2c_bytes":5434,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5410,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":785,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":356},{"bytes":404,"dir":1,"interval":5},{"bytes":720,"dir":2,"interval":25},{"bytes":381,"dir":1,"interval":42},{"bytes":720,"dir":2,"interval":43},{"bytes":31,"dir":2,"interval":4999}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51292,"dip":"182.254.52.186","dport":443,"proto":"tcp","c2s_bytes":811,"s2c_bytes":4611,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":31745,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1329,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":73,"dir":2,"interval":0},{"bytes":294,"dir":1,"interval":1741},{"bytes":31,"dir":2,"interval":30283}],"tls":{"version":"tls1.2","sni":"puui.qpic.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51109,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":11981,"s2c_bytes":82283,"c2s_pkts":24,"s2c_pkts":85,"total_pkts":109,"duration":124392,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":126},{"bytes":43,"dir":2,"interval":126},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":119},{"bytes":42,"dir":1,"interval":9},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1},{"bytes":124,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":128},{"bytes":1460,"dir":2,"interval":2},{"bytes":1083,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":672,"dir":1,"interval":731},{"bytes":1460,"dir":2,"interval":770},{"bytes":1460,"dir":2,"interval":0},{"bytes":445,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":650,"dir":1,"interval":263},{"bytes":1460,"dir":2,"interval":283},{"bytes":1460,"dir":2,"interval":0},{"bytes":463,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":646,"dir":1,"interval":265},{"bytes":1460,"dir":2,"interval":252},{"bytes":1460,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":664,"dir":1,"interval":302},{"bytes":1460,"dir":2,"interval":254},{"bytes":1460,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":663,"dir":1,"interval":366},{"bytes":1460,"dir":2,"interval":423},{"bytes":1075,"dir":2,"interval":0},{"bytes":1300,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":660,"dir":1,"interval":323},{"bytes":1460,"dir":2,"interval":313},{"bytes":1102,"dir":2,"interval":0},{"bytes":1231,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":445,"dir":1,"interval":425},{"bytes":1460,"dir":2,"interval":436},{"bytes":320,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":787,"dir":1,"interval":53072},{"bytes":1460,"dir":2,"interval":53013},{"bytes":1460,"dir":2,"interval":0},{"bytes":1049,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1206,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1206,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":87},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":4,"dir":2,"interval":0},{"bytes":705,"dir":1,"interval":6846},{"bytes":1460,"dir":2,"interval":6828},{"bytes":709,"dir":2,"interval":0},{"bytes":1284,"dir":2,"interval":0},{"bytes":667,"dir":1,"interval":201},{"bytes":1460,"dir":2,"interval":139},{"bytes":1460,"dir":2,"interval":0},{"bytes":471,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":646,"dir":1,"interval":153},{"bytes":1460,"dir":2,"interval":145},{"bytes":1144,"dir":2,"interval":0},{"bytes":1281,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":664,"dir":1,"interval":113},{"bytes":1460,"dir":2,"interval":203},{"bytes":1460,"dir":2,"interval":0},{"bytes":648,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":647,"dir":1,"interval":225},{"bytes":1460,"dir":2,"interval":253},{"bytes":1144,"dir":2,"interval":0},{"bytes":1238,"dir":2,"interval":6},{"bytes":30,"dir":2,"interval":0},{"bytes":660,"dir":1,"interval":313},{"bytes":1460,"dir":2,"interval":436},{"bytes":1460,"dir":2,"interval":0},{"bytes":849,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":445,"dir":1,"interval":382},{"bytes":1460,"dir":2,"interval":153},{"bytes":326,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60147}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":51323,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":14772,"s2c_bytes":9421,"c2s_pkts":43,"s2c_pkts":80,"total_pkts":123,"duration":28610,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":823},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":742,"dir":1,"interval":0},{"bytes":369,"dir":1,"interval":0},{"bytes":367,"dir":1,"interval":0},{"bytes":368,"dir":1,"interval":0},{"bytes":368,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":200},{"bytes":102,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":5},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":69},{"bytes":365,"dir":1,"interval":42},{"bytes":365,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":104},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":365,"dir":1,"interval":53},{"bytes":365,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":46},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":368,"dir":1,"interval":111},{"bytes":368,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":104},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":379,"dir":1,"interval":36},{"bytes":367,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":29},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":366,"dir":1,"interval":65},{"bytes":380,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":58},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":380,"dir":1,"interval":77},{"bytes":380,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":72},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":379,"dir":1,"interval":231},{"bytes":379,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":223},{"bytes":38,"dir":2,"interval":0},{"bytes":379,"dir":1,"interval":12},{"bytes":379,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":380,"dir":1,"interval":107},{"bytes":379,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":105},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":369,"dir":1,"interval":83},{"bytes":367,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":77},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":368,"dir":1,"interval":32},{"bytes":368,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":25},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":368,"dir":1,"interval":162},{"bytes":367,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":155},{"bytes":38,"dir":2,"interval":0},{"bytes":368,"dir":1,"interval":7},{"bytes":379,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":378,"dir":1,"interval":2886},{"bytes":102,"dir":2,"interval":2879},{"bytes":38,"dir":2,"interval":0},{"bytes":272,"dir":1,"interval":3349},{"bytes":102,"dir":2,"interval":3349},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":12},{"bytes":355,"dir":1,"interval":588},{"bytes":102,"dir":2,"interval":600},{"bytes":38,"dir":2,"interval":0},{"bytes":378,"dir":1,"interval":14},{"bytes":102,"dir":2,"interval":14},{"bytes":38,"dir":2,"interval":0},{"bytes":378,"dir":1,"interval":10289},{"bytes":102,"dir":2,"interval":10289},{"bytes":38,"dir":2,"interval":0},{"bytes":378,"dir":1,"interval":5319},{"bytes":102,"dir":2,"interval":5319},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"btrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51317,"dip":"182.254.52.102","dport":443,"proto":"tcp","c2s_bytes":1203,"s2c_bytes":8696,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":29750,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1306},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":342,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":211},{"bytes":1327,"dir":2,"interval":5},{"bytes":1108,"dir":2,"interval":13},{"bytes":38,"dir":1,"interval":47},{"bytes":80,"dir":1,"interval":916},{"bytes":1291,"dir":2,"interval":947}],"tls":{"version":"tls1.2","sni":"i.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51340,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":1310,"s2c_bytes":28966,"c2s_pkts":7,"s2c_pkts":26,"total_pkts":33,"duration":20430,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1323,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":195},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":401,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":98},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":-1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":8,"dir":2,"interval":-1},{"bytes":38,"dir":2,"interval":0},{"bytes":209,"dir":1,"interval":236},{"bytes":1460,"dir":2,"interval":139},{"bytes":1460,"dir":2,"interval":0},{"bytes":914,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51349,"dip":"182.254.90.122","dport":443,"proto":"tcp","c2s_bytes":1094,"s2c_bytes":150745,"c2s_pkts":7,"s2c_pkts":113,"total_pkts":120,"duration":14806,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":34},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":684},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":352,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":306},{"bytes":38,"dir":1,"interval":46},{"bytes":1448,"dir":2,"interval":35},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":310,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":990,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":622,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":363},{"bytes":1448,"dir":2,"interval":340},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":989,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":12},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":294,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"puui.qpic.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51350,"dip":"182.254.90.122","dport":443,"proto":"tcp","c2s_bytes":1121,"s2c_bytes":132458,"c2s_pkts":7,"s2c_pkts":101,"total_pkts":108,"duration":14806,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1378,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":684},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":379,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":311},{"bytes":38,"dir":1,"interval":46},{"bytes":1448,"dir":2,"interval":28},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":855,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":961,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":354},{"bytes":1448,"dir":2,"interval":343},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":646,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":136,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"vfiles.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51320,"dip":"58.250.137.69","dport":443,"proto":"tcp","c2s_bytes":1496,"s2c_bytes":5403,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":28823,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1264,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":47},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1105},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":531,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":15},{"bytes":38,"dir":2,"interval":228},{"bytes":409,"dir":2,"interval":55},{"bytes":38,"dir":2,"interval":0},{"bytes":265,"dir":1,"interval":7776},{"bytes":409,"dir":2,"interval":7745},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"access.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51318,"dip":"182.254.52.102","dport":443,"proto":"tcp","c2s_bytes":1092,"s2c_bytes":102879,"c2s_pkts":7,"s2c_pkts":75,"total_pkts":82,"duration":29739,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1541},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":350,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":288},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1149,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":139},{"bytes":42,"dir":1,"interval":169},{"bytes":1460,"dir":2,"interval":292},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1381,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"img1.gtimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51357,"dip":"103.44.59.52","dport":443,"proto":"tcp","c2s_bytes":1428,"s2c_bytes":5434,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5347,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":785,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":252},{"bytes":404,"dir":1,"interval":5},{"bytes":720,"dir":2,"interval":26},{"bytes":381,"dir":1,"interval":85},{"bytes":720,"dir":2,"interval":84},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"data.video.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51358,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":512,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":74},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":75},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51361,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":325,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51360,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4184,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":716,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61498,"dip":"153.37.235.67","dport":443,"proto":"tcp","c2s_bytes":194,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":197,"packets":[{"bytes":194,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":5},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mobsec-sec.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51374,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":289,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":6},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61499,"dip":"153.37.235.67","dport":443,"proto":"tcp","c2s_bytes":200,"s2c_bytes":3685,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":143,"packets":[{"bytes":200,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mobsec-sec.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51372,"dip":"182.61.200.17","dport":443,"proto":"tcp","c2s_bytes":1729,"s2c_bytes":5531,"c2s_pkts":8,"s2c_pkts":13,"total_pkts":21,"duration":419,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":386},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":848,"dir":1,"interval":0},{"bytes":150,"dir":1,"interval":0},{"bytes":84,"dir":2,"interval":45},{"bytes":38,"dir":1,"interval":5},{"bytes":42,"dir":2,"interval":3},{"bytes":92,"dir":2,"interval":6},{"bytes":1126,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":25}],"tls":{"version":"tls1.2","sni":"sofire.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51369,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":488,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51366,"dip":"157.255.77.49","dport":443,"proto":"tcp","c2s_bytes":1551,"s2c_bytes":4525,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":877,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":35},{"bytes":51,"dir":2,"interval":0},{"bytes":1003,"dir":1,"interval":734},{"bytes":298,"dir":2,"interval":186},{"bytes":34,"dir":2,"interval":10},{"bytes":31,"dir":1,"interval":140}],"tls":{"version":"tls1.2","sni":"pim.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51381,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":378,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51371,"dip":"64.13.192.76","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4688,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":909,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":265,"dir":2,"interval":0},{"bytes":343,"dir":2,"interval":176}],"tls":{"version":"tls1.2","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61601,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":275,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51382,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":702,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":90},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":55},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":90}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61610,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":299,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51384,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1011,"s2c_bytes":6796,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":893,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":608,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":824},{"bytes":53,"dir":1,"interval":7},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":154,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":148},{"bytes":1460,"dir":2,"interval":22},{"bytes":1405,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":56}],"tls":{"version":"tls1.2","sni":"gspe21-ssl.ls.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51385,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1007,"s2c_bytes":5372,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":904,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":608,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":823},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":150,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":146},{"bytes":1441,"dir":2,"interval":23},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":60}],"tls":{"version":"tls1.2","sni":"gspe21-ssl.ls.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51383,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1011,"s2c_bytes":8081,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":968,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":608,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":884},{"bytes":53,"dir":1,"interval":34},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":154,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":9},{"bytes":38,"dir":2,"interval":66},{"bytes":1359,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1331,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":37}],"tls":{"version":"tls1.2","sni":"gspe21-ssl.ls.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61613,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":211,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61616,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":211,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61614,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":211,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61615,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":119,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61624,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":80,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61626,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":1542,"c2s_pkts":1,"s2c_pkts":2,"total_pkts":3,"duration":97,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51401,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":2507,"s2c_bytes":4692,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":499,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":481},{"bytes":182,"dir":1,"interval":0},{"bytes":325,"dir":1,"interval":0},{"bytes":483,"dir":2,"interval":126},{"bytes":31,"dir":1,"interval":15},{"bytes":31,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51400,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":2503,"s2c_bytes":5314,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":508,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":485},{"bytes":182,"dir":1,"interval":0},{"bytes":321,"dir":1,"interval":0},{"bytes":1105,"dir":2,"interval":125},{"bytes":31,"dir":1,"interval":19},{"bytes":31,"dir":2,"interval":14}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51370,"dip":"203.187.160.136","dport":443,"proto":"tcp","c2s_bytes":2246,"s2c_bytes":5562,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":3973,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":707,"dir":2,"interval":0},{"bytes":347,"dir":2,"interval":1},{"bytes":125,"dir":2,"interval":3},{"bytes":45,"dir":2,"interval":0},{"bytes":1172,"dir":1,"interval":683},{"bytes":526,"dir":1,"interval":15},{"bytes":1369,"dir":2,"interval":197},{"bytes":31,"dir":1,"interval":3273}],"tls":{"version":"tls1.2","sni":"tiebac.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51359,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":1861,"s2c_bytes":4889,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":4545,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":6},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":33},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1081,"dir":1,"interval":572},{"bytes":232,"dir":1,"interval":0},{"bytes":696,"dir":2,"interval":375},{"bytes":31,"dir":1,"interval":3961}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51399,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":9411,"s2c_bytes":7344,"c2s_pkts":10,"s2c_pkts":14,"total_pkts":24,"duration":1225,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":697},{"bytes":80,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":13},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":4},{"bytes":1452,"dir":1,"interval":0},{"bytes":71,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":514},{"bytes":1460,"dir":2,"interval":0},{"bytes":166,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":506},{"bytes":31,"dir":2,"interval":497}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51365,"dip":"112.80.255.172","dport":443,"proto":"tcp","c2s_bytes":1739,"s2c_bytes":4615,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":4182,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":27},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1057,"dir":1,"interval":205},{"bytes":134,"dir":1,"interval":8},{"bytes":422,"dir":2,"interval":215},{"bytes":31,"dir":1,"interval":3962}],"tls":{"version":"tls1.2","sni":"qapm.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61625,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2196,"s2c_bytes":3956,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":231,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":10},{"bytes":45,"dir":1,"interval":152},{"bytes":720,"dir":1,"interval":11},{"bytes":1226,"dir":1,"interval":11},{"bytes":321,"dir":2,"interval":105}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":61630,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":55,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61631,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":56,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61622,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":1752,"s2c_bytes":4145,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":521,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":52},{"bytes":45,"dir":1,"interval":367},{"bytes":477,"dir":1,"interval":22},{"bytes":1028,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":186},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":61635,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":84,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61636,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":84,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61639,"dip":"182.61.200.37","dport":443,"proto":"tcp","c2s_bytes":198,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":79,"packets":[{"bytes":198,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bdbus-turbonet.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61620,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":708,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61619,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":719,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61618,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":728,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61629,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":283,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":3},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61649,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":48,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61648,"dip":"182.61.200.37","dport":443,"proto":"tcp","c2s_bytes":204,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":82,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bdbus-turbonet.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61647,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":3685,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":87,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61653,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":65,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61650,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":143,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61651,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":141,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61656,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":95,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61654,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":242,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51415,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":1185,"s2c_bytes":283598,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1176,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":7},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":160},{"bytes":542,"dir":1,"interval":45},{"bytes":1460,"dir":2,"interval":196},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"x0.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61760,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":235,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61761,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":179,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51265,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":4962,"s2c_bytes":5162,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":58656,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1427,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":45},{"bytes":428,"dir":1,"interval":497},{"bytes":545,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":203},{"bytes":489,"dir":1,"interval":9406},{"bytes":1147,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":9418},{"bytes":522,"dir":1,"interval":18145},{"bytes":1283,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":18141},{"bytes":31,"dir":1,"interval":30600}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51266,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":3346,"s2c_bytes":4963,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":58657,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1427,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":45},{"bytes":428,"dir":1,"interval":497},{"bytes":565,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":205},{"bytes":522,"dir":1,"interval":27566},{"bytes":1283,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":27566},{"bytes":31,"dir":1,"interval":30586}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61768,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":60,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61655,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1126,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61767,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":175,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51440,"dip":"120.52.148.94","dport":443,"proto":"tcp","c2s_bytes":1015,"s2c_bytes":4425,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":154,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":498,"dir":1,"interval":142},{"bytes":246,"dir":2,"interval":38},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cm.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51392,"dip":"182.61.200.171","dport":443,"proto":"tcp","c2s_bytes":5339,"s2c_bytes":5202,"c2s_pkts":8,"s2c_pkts":14,"total_pkts":22,"duration":5860,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":102},{"bytes":596,"dir":1,"interval":0},{"bytes":74,"dir":1,"interval":0},{"bytes":358,"dir":2,"interval":24},{"bytes":131,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":891},{"bytes":596,"dir":1,"interval":0},{"bytes":621,"dir":1,"interval":0},{"bytes":358,"dir":2,"interval":893},{"bytes":131,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":4864},{"bytes":31,"dir":2,"interval":4860}],"tls":{"version":"tls1.2","sni":"ada.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51397,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":2455,"s2c_bytes":4907,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":5435,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":3},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":6},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":280},{"bytes":455,"dir":1,"interval":0},{"bytes":596,"dir":2,"interval":59},{"bytes":31,"dir":1,"interval":5151},{"bytes":31,"dir":2,"interval":5146}],"tls":{"version":"tls1.2","sni":"sp0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51380,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":2467,"s2c_bytes":56693,"c2s_pkts":4,"s2c_pkts":50,"total_pkts":54,"duration":6822,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":350},{"bytes":467,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":57},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1311,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":883,"dir":2,"interval":0},{"bytes":1127,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":209,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":6468},{"bytes":31,"dir":2,"interval":6434}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51395,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":4030,"s2c_bytes":4558,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":5492,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":260},{"bytes":596,"dir":1,"interval":0},{"bytes":1434,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":203},{"bytes":31,"dir":1,"interval":5228},{"bytes":31,"dir":2,"interval":5141}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51394,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":4675,"s2c_bytes":4732,"c2s_pkts":7,"s2c_pkts":12,"total_pkts":19,"duration":5492,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":143},{"bytes":596,"dir":1,"interval":0},{"bytes":58,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":108},{"bytes":1452,"dir":1,"interval":1091},{"bytes":569,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":1094},{"bytes":31,"dir":1,"interval":4254},{"bytes":31,"dir":2,"interval":4169}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51396,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":2530,"s2c_bytes":4558,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":5494,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":38},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":8},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":279},{"bytes":530,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":165},{"bytes":31,"dir":1,"interval":5211},{"bytes":31,"dir":2,"interval":5134}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51404,"dip":"182.254.59.158","dport":443,"proto":"tcp","c2s_bytes":1131,"s2c_bytes":6903,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":3252,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":6},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":368},{"bytes":457,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":102},{"bytes":1027,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":2872}],"tls":{"version":"tls1.2","sni":"p1.ifengimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51403,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":1146,"s2c_bytes":4866,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":3251,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":5},{"bytes":274,"dir":2,"interval":8},{"bytes":126,"dir":1,"interval":367},{"bytes":472,"dir":1,"interval":6},{"bytes":450,"dir":2,"interval":88},{"bytes":31,"dir":1,"interval":2872}],"tls":{"version":"tls1.2","sni":"p0.ifengimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51391,"dip":"112.80.255.135","dport":443,"proto":"tcp","c2s_bytes":3083,"s2c_bytes":4525,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":5863,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":22},{"bytes":51,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":199},{"bytes":596,"dir":1,"interval":0},{"bytes":487,"dir":1,"interval":0},{"bytes":332,"dir":2,"interval":40},{"bytes":31,"dir":1,"interval":5646}],"tls":{"version":"tls1.2","sni":"fclick.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51458,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4296,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":211,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":12}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61771,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":710,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":10},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61775,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":51,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51459,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51469,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":452,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51348,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":2641,"s2c_bytes":4197,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31825,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":817,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":45},{"bytes":487,"dir":1,"interval":635},{"bytes":1440,"dir":1,"interval":0},{"bytes":166,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":331},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31165}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61772,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1308,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51464,"dip":"203.119.129.115","dport":443,"proto":"tcp","c2s_bytes":1434,"s2c_bytes":3853,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":1261,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":318,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":231},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":476,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":111},{"bytes":258,"dir":1,"interval":9},{"bytes":38,"dir":1,"interval":0},{"bytes":138,"dir":2,"interval":7},{"bytes":75,"dir":2,"interval":8},{"bytes":46,"dir":2,"interval":1000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"z11.cnzz.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51471,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3463,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":406,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"180.76.76.112","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61776,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":193,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61778,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":53,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61777,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":240,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51475,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4296,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":138,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":12},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61954,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":53,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61955,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":101,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51419,"dip":"203.212.7.17","dport":443,"proto":"tcp","c2s_bytes":972,"s2c_bytes":3472,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":5725,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":111,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":4},{"bytes":455,"dir":1,"interval":715},{"bytes":349,"dir":2,"interval":366},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"region.ifeng.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51434,"dip":"111.202.92.17","dport":443,"proto":"tcp","c2s_bytes":1611,"s2c_bytes":3365,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":5096,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":220,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":5},{"bytes":1094,"dir":1,"interval":89},{"bytes":167,"dir":2,"interval":23},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"err.ifengcloud.ifeng.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51377,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":19963,"s2c_bytes":219278,"c2s_pkts":24,"s2c_pkts":176,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":366},{"bytes":596,"dir":1,"interval":0},{"bytes":171,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":767},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":306,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":55},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":387,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":329,"dir":2,"interval":0},{"bytes":44,"dir":2,"interval":29},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1005},{"bytes":596,"dir":1,"interval":0},{"bytes":218,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":180},{"bytes":155,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":80},{"bytes":596,"dir":1,"interval":0},{"bytes":447,"dir":1,"interval":0},{"bytes":393,"dir":2,"interval":138},{"bytes":1452,"dir":1,"interval":1061},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":3},{"bytes":203,"dir":1,"interval":0},{"bytes":965,"dir":2,"interval":1016},{"bytes":1452,"dir":1,"interval":4066},{"bytes":596,"dir":1,"interval":0},{"bytes":781,"dir":1,"interval":0},{"bytes":380,"dir":2,"interval":4071},{"bytes":1452,"dir":1,"interval":3894},{"bytes":596,"dir":1,"interval":0},{"bytes":379,"dir":1,"interval":0},{"bytes":380,"dir":2,"interval":3893},{"bytes":1452,"dir":1,"interval":22},{"bytes":431,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":201,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1457},{"bytes":172,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1458},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1310,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51390,"dip":"182.61.128.195","dport":443,"proto":"tcp","c2s_bytes":2965,"s2c_bytes":230491,"c2s_pkts":17,"s2c_pkts":183,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":287},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":850,"dir":1,"interval":0},{"bytes":199,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":19},{"bytes":985,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":577,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":217,"dir":1,"interval":10293},{"bytes":106,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":10294},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1148,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":974,"dir":2,"interval":0},{"bytes":117,"dir":1,"interval":60},{"bytes":106,"dir":1,"interval":0},{"bytes":118,"dir":1,"interval":0},{"bytes":107,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":107,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":44},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":800,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":7,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51429,"dip":"111.202.92.17","dport":443,"proto":"tcp","c2s_bytes":1350,"s2c_bytes":4563,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":5277,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":111,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":6},{"bytes":833,"dir":1,"interval":259},{"bytes":1448,"dir":2,"interval":63},{"bytes":26,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5006}],"tls":{"version":"tls1.2","sni":"ztyumn.ifeng.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51476,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":4009,"s2c_bytes":259557,"c2s_pkts":5,"s2c_pkts":195,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":332},{"bytes":480,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":939},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":203,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1067,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":806,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":871,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1133,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":723,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1127},{"bytes":108,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":206},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":656,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1055,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51428,"dip":"111.202.92.17","dport":443,"proto":"tcp","c2s_bytes":2270,"s2c_bytes":6746,"c2s_pkts":3,"s2c_pkts":9,"total_pkts":12,"duration":5328,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":111,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":5},{"bytes":832,"dir":1,"interval":236},{"bytes":1448,"dir":2,"interval":48},{"bytes":1448,"dir":2,"interval":0},{"bytes":456,"dir":2,"interval":0},{"bytes":921,"dir":1,"interval":86},{"bytes":305,"dir":2,"interval":73},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"ztyumn.ifeng.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51426,"dip":"111.202.92.17","dport":443,"proto":"tcp","c2s_bytes":4883,"s2c_bytes":7295,"c2s_pkts":6,"s2c_pkts":10,"total_pkts":16,"duration":5585,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":111,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":6},{"bytes":835,"dir":1,"interval":239},{"bytes":1448,"dir":2,"interval":98},{"bytes":460,"dir":2,"interval":0},{"bytes":832,"dir":1,"interval":56},{"bytes":1420,"dir":2,"interval":21},{"bytes":878,"dir":1,"interval":36},{"bytes":303,"dir":2,"interval":32},{"bytes":921,"dir":1,"interval":14},{"bytes":303,"dir":2,"interval":14},{"bytes":900,"dir":1,"interval":230},{"bytes":303,"dir":2,"interval":230}],"tls":{"version":"tls1.2","sni":"ztyumn.ifeng.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51430,"dip":"111.202.92.17","dport":443,"proto":"tcp","c2s_bytes":2248,"s2c_bytes":6825,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":5330,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":111,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":14},{"bytes":831,"dir":1,"interval":232},{"bytes":1448,"dir":2,"interval":51},{"bytes":1448,"dir":2,"interval":0},{"bytes":568,"dir":2,"interval":0},{"bytes":900,"dir":1,"interval":89},{"bytes":303,"dir":2,"interval":75}],"tls":{"version":"tls1.2","sni":"ztyumn.ifeng.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51447,"dip":"111.202.92.17","dport":443,"proto":"tcp","c2s_bytes":2249,"s2c_bytes":3308,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":5134,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":177,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":5},{"bytes":1448,"dir":1,"interval":121},{"bytes":284,"dir":1,"interval":0},{"bytes":184,"dir":2,"interval":65}],"tls":{"version":"tls1.2","sni":"e1.feather.ifeng.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51451,"dip":"111.202.92.17","dport":443,"proto":"tcp","c2s_bytes":2206,"s2c_bytes":3308,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":5341,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":177,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":5},{"bytes":1448,"dir":1,"interval":332},{"bytes":241,"dir":1,"interval":0},{"bytes":184,"dir":2,"interval":253}],"tls":{"version":"tls1.2","sni":"e1.feather.ifeng.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51481,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4296,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":409,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":73}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51387,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":4615,"s2c_bytes":210829,"c2s_pkts":19,"s2c_pkts":181,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1102},{"bytes":53,"dir":1,"interval":7},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1340,"dir":1,"interval":0},{"bytes":26,"dir":1,"interval":0},{"bytes":165,"dir":1,"interval":0},{"bytes":166,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":38},{"bytes":38,"dir":1,"interval":3},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":132,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1327,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":397,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":673,"dir":1,"interval":11208},{"bytes":191,"dir":1,"interval":0},{"bytes":201,"dir":1,"interval":0},{"bytes":182,"dir":1,"interval":3},{"bytes":201,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":11219},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":482,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":264,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":264,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":264,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":725,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":909,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":66},{"bytes":1340,"dir":2,"interval":45},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":3,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":221,"dir":1,"interval":99},{"bytes":1340,"dir":2,"interval":125},{"bytes":1340,"dir":2,"interval":0},{"bytes":1239,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":25},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":114,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":905,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":191,"dir":1,"interval":120},{"bytes":230,"dir":2,"interval":62},{"bytes":190,"dir":1,"interval":42},{"bytes":1340,"dir":2,"interval":177},{"bytes":1340,"dir":2,"interval":0},{"bytes":1249,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":28},{"bytes":1340,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t7.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51414,"dip":"203.212.7.17","dport":443,"proto":"tcp","c2s_bytes":3690,"s2c_bytes":3593,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":9035,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":145,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":4},{"bytes":684,"dir":1,"interval":1069},{"bytes":167,"dir":2,"interval":554},{"bytes":1098,"dir":1,"interval":59},{"bytes":167,"dir":2,"interval":60},{"bytes":1391,"dir":1,"interval":2901},{"bytes":167,"dir":2,"interval":2897}],"tls":{"version":"tls1.2","sni":"collect.ifengcloud.ifeng.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51373,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":1944,"s2c_bytes":4921,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":15492,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":6},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":32},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1154,"dir":1,"interval":426},{"bytes":273,"dir":1,"interval":0},{"bytes":697,"dir":2,"interval":78},{"bytes":31,"dir":2,"interval":15000}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51363,"dip":"106.11.19.93","dport":443,"proto":"tcp","c2s_bytes":1518,"s2c_bytes":4184,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":16029,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1378,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":40},{"bytes":330,"dir":1,"interval":908},{"bytes":671,"dir":1,"interval":0},{"bytes":1041,"dir":2,"interval":206},{"bytes":31,"dir":2,"interval":15000}],"tls":{"version":"tls1.2","sni":"dispatcher.is.autonavi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51424,"dip":"111.202.92.17","dport":443,"proto":"tcp","c2s_bytes":4569,"s2c_bytes":3668,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":10234,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":220,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":15},{"bytes":680,"dir":1,"interval":340},{"bytes":167,"dir":2,"interval":91},{"bytes":1387,"dir":1,"interval":2561},{"bytes":167,"dir":2,"interval":2551},{"bytes":1448,"dir":1,"interval":2327},{"bytes":537,"dir":1,"interval":0},{"bytes":167,"dir":2,"interval":2327}],"tls":{"version":"tls1.2","sni":"err.ifengcloud.ifeng.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51484,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4374,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1643,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss3.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51486,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4296,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":185,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":9}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51487,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4296,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":151,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":4},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":15}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51488,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4296,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":264,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":62076,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":398,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51441,"dip":"203.212.7.224","dport":443,"proto":"tcp","c2s_bytes":1256,"s2c_bytes":3569,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":10875,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":157,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":739,"dir":1,"interval":871},{"bytes":203,"dir":2,"interval":397},{"bytes":31,"dir":2,"interval":10000}],"tls":{"version":"tls1.2","sni":"stadig.ifeng.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":62077,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":240,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51367,"dip":"182.61.128.194","dport":443,"proto":"tcp","c2s_bytes":1000,"s2c_bytes":5090,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":20365,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":321},{"bytes":53,"dir":1,"interval":31},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":197},{"bytes":601,"dir":2,"interval":3},{"bytes":46,"dir":2,"interval":20002},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51378,"dip":"182.61.128.194","dport":443,"proto":"tcp","c2s_bytes":1052,"s2c_bytes":4874,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":20098,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":84},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":226,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":30},{"bytes":385,"dir":2,"interval":3},{"bytes":38,"dir":1,"interval":17},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51356,"dip":"182.254.76.113","dport":443,"proto":"tcp","c2s_bytes":842,"s2c_bytes":8748,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":31469,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1314,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":34},{"bytes":294,"dir":1,"interval":947},{"bytes":1460,"dir":2,"interval":73},{"bytes":1460,"dir":2,"interval":0},{"bytes":1336,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30517}],"tls":{"version":"tls1.2","sni":"puui.qpic.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":62190,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62191,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":76,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61774,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":611,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62192,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":341,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62194,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":50,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62195,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":51,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62196,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":51,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61497,"dip":"182.61.240.23","dport":443,"proto":"tcp","c2s_bytes":1776,"s2c_bytes":3991,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":22070,"packets":[{"bytes":174,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":264,"dir":2,"interval":0},{"bytes":186,"dir":2,"interval":31},{"bytes":51,"dir":1,"interval":390},{"bytes":1145,"dir":1,"interval":1},{"bytes":417,"dir":2,"interval":58},{"bytes":223,"dir":1,"interval":48},{"bytes":71,"dir":2,"interval":44},{"bytes":152,"dir":1,"interval":547},{"bytes":133,"dir":2,"interval":542},{"bytes":31,"dir":1,"interval":21080}],"tls":{"version":"tls1.2","sni":"pimc.baidu.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51388,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":2191,"s2c_bytes":10154,"c2s_pkts":8,"s2c_pkts":14,"total_pkts":22,"duration":20967,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":949},{"bytes":53,"dir":1,"interval":9},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1340,"dir":1,"interval":0},{"bytes":25,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":38},{"bytes":38,"dir":1,"interval":5},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":305,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":19999},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t8.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":62193,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":776,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":60576,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2260,"s2c_bytes":4154,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":63988,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":1440,"dir":1,"interval":858},{"bytes":650,"dir":1,"interval":0},{"bytes":519,"dir":2,"interval":115}],"tls":{"version":"tls1.2","sni":"p.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":61642,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":20072,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":19999},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"f12.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61645,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":190,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":20069,"packets":[{"bytes":190,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":19999},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"timgmb.bdimg.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61640,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":20082,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"f10.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61644,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":190,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":20071,"packets":[{"bytes":190,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":19999},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"timgmb.bdimg.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61646,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":190,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":20073,"packets":[{"bytes":190,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"timgmb.bdimg.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61638,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":20075,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"flpc.bdstatic.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61637,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4451,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":20085,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"f11.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62203,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":150,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62205,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":72,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62204,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":315,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62206,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":250,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51445,"dip":"182.254.59.156","dport":443,"proto":"tcp","c2s_bytes":1073,"s2c_bytes":6253,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":19161,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":175},{"bytes":430,"dir":1,"interval":20},{"bytes":1460,"dir":2,"interval":55},{"bytes":408,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c0.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51410,"dip":"182.254.59.156","dport":443,"proto":"tcp","c2s_bytes":1110,"s2c_bytes":19316,"c2s_pkts":3,"s2c_pkts":16,"total_pkts":19,"duration":21270,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":5},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":271},{"bytes":467,"dir":1,"interval":21},{"bytes":1460,"dir":2,"interval":158},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":300,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c0.ifengimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51453,"dip":"124.236.20.233","dport":443,"proto":"tcp","c2s_bytes":1326,"s2c_bytes":14291,"c2s_pkts":10,"s2c_pkts":19,"total_pkts":29,"duration":18942,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":245,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":409},{"bytes":53,"dir":1,"interval":5},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":255,"dir":1,"interval":0},{"bytes":84,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":304},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":106,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1415,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":311},{"bytes":901,"dir":2,"interval":297},{"bytes":38,"dir":2,"interval":0},{"bytes":76,"dir":1,"interval":94},{"bytes":903,"dir":2,"interval":94},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s4.cnzz.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51393,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":36300,"s2c_bytes":8628,"c2s_pkts":41,"s2c_pkts":28,"total_pkts":69,"duration":24739,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":246},{"bytes":596,"dir":1,"interval":0},{"bytes":144,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":188},{"bytes":1452,"dir":1,"interval":100},{"bytes":524,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":96},{"bytes":1452,"dir":1,"interval":176},{"bytes":541,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":164},{"bytes":1452,"dir":1,"interval":449},{"bytes":558,"dir":1,"interval":0},{"bytes":299,"dir":2,"interval":462},{"bytes":1452,"dir":1,"interval":409},{"bytes":550,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":412},{"bytes":1452,"dir":1,"interval":3487},{"bytes":551,"dir":1,"interval":8},{"bytes":174,"dir":2,"interval":3513},{"bytes":1452,"dir":1,"interval":1330},{"bytes":550,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":1313},{"bytes":1452,"dir":1,"interval":1423},{"bytes":551,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":1420},{"bytes":1452,"dir":1,"interval":1358},{"bytes":104,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":1362},{"bytes":1452,"dir":1,"interval":1523},{"bytes":77,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":1530},{"bytes":1452,"dir":1,"interval":778},{"bytes":32,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":775},{"bytes":1452,"dir":1,"interval":686},{"bytes":408,"dir":1,"interval":30},{"bytes":299,"dir":2,"interval":713},{"bytes":1452,"dir":1,"interval":3304},{"bytes":596,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":2},{"bytes":174,"dir":2,"interval":3312},{"bytes":1452,"dir":1,"interval":379},{"bytes":580,"dir":1,"interval":0},{"bytes":174,"dir":2,"interval":370},{"bytes":1452,"dir":1,"interval":1294},{"bytes":348,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":1308},{"bytes":1452,"dir":1,"interval":189},{"bytes":353,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":176},{"bytes":1452,"dir":1,"interval":194},{"bytes":359,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":209},{"bytes":1452,"dir":1,"interval":820},{"bytes":344,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":788},{"bytes":1452,"dir":1,"interval":228},{"bytes":357,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":243}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51407,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":2104,"s2c_bytes":90246,"c2s_pkts":5,"s2c_pkts":66,"total_pkts":71,"duration":21318,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":4},{"bytes":274,"dir":2,"interval":4},{"bytes":126,"dir":1,"interval":109},{"bytes":491,"dir":1,"interval":64},{"bytes":1460,"dir":2,"interval":128},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1195,"dir":2,"interval":0},{"bytes":485,"dir":1,"interval":144},{"bytes":1460,"dir":2,"interval":133},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":973,"dir":2,"interval":0},{"bytes":485,"dir":1,"interval":425},{"bytes":1460,"dir":2,"interval":418},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1196,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"x0.ifengimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51408,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":4652,"s2c_bytes":73268,"c2s_pkts":10,"s2c_pkts":57,"total_pkts":67,"duration":21288,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":6},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":290},{"bytes":483,"dir":1,"interval":21},{"bytes":1460,"dir":2,"interval":152},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":730,"dir":2,"interval":0},{"bytes":503,"dir":1,"interval":402},{"bytes":1460,"dir":2,"interval":401},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":146},{"bytes":1460,"dir":2,"interval":144},{"bytes":1085,"dir":2,"interval":0},{"bytes":501,"dir":1,"interval":291},{"bytes":1460,"dir":2,"interval":290},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1350,"dir":2,"interval":0},{"bytes":501,"dir":1,"interval":264},{"bytes":1460,"dir":2,"interval":264},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":866,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":59},{"bytes":1460,"dir":2,"interval":60},{"bytes":746,"dir":2,"interval":0},{"bytes":507,"dir":1,"interval":308},{"bytes":1460,"dir":2,"interval":306},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":273,"dir":2,"interval":0},{"bytes":506,"dir":1,"interval":816},{"bytes":1460,"dir":2,"interval":801},{"bytes":1460,"dir":2,"interval":0},{"bytes":261,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"x0.ifengimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51491,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":2317,"s2c_bytes":4527,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":7642,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":145},{"bytes":348,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":105}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51448,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1541,"s2c_bytes":55746,"c2s_pkts":3,"s2c_pkts":42,"total_pkts":45,"duration":21177,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1251,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":502,"dir":1,"interval":89},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":65,"dir":2,"interval":0},{"bytes":522,"dir":1,"interval":168},{"bytes":1460,"dir":2,"interval":169},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":906,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c1.ifengimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51411,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":1135,"s2c_bytes":56753,"c2s_pkts":3,"s2c_pkts":42,"total_pkts":45,"duration":23122,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":323},{"bytes":492,"dir":1,"interval":101},{"bytes":1460,"dir":2,"interval":308},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":915,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"x0.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51446,"dip":"182.254.59.156","dport":443,"proto":"tcp","c2s_bytes":1078,"s2c_bytes":6398,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":21182,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":6},{"bytes":258,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":174},{"bytes":435,"dir":1,"interval":19},{"bytes":1460,"dir":2,"interval":54},{"bytes":553,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c0.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51398,"dip":"182.61.200.165","dport":443,"proto":"tcp","c2s_bytes":3167,"s2c_bytes":4785,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":25634,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":69},{"bytes":596,"dir":1,"interval":0},{"bytes":602,"dir":1,"interval":0},{"bytes":592,"dir":2,"interval":31}],"tls":{"version":"tls1.2","sni":"novelapi.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51457,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1039,"s2c_bytes":33063,"c2s_pkts":2,"s2c_pkts":25,"total_pkts":27,"duration":20708,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1236,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":522,"dir":1,"interval":1153},{"bytes":1460,"dir":2,"interval":295},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":556,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c1.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51456,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1039,"s2c_bytes":29079,"c2s_pkts":2,"s2c_pkts":22,"total_pkts":24,"duration":20708,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1236,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":522,"dir":1,"interval":1177},{"bytes":1460,"dir":2,"interval":317},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":952,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c1.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51418,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":1145,"s2c_bytes":7790,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":22550,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4},{"bytes":258,"dir":2,"interval":4},{"bytes":126,"dir":1,"interval":404},{"bytes":502,"dir":1,"interval":251},{"bytes":1460,"dir":2,"interval":544},{"bytes":1460,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"x0.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51417,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":1155,"s2c_bytes":5958,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":22549,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":398},{"bytes":512,"dir":1,"interval":251},{"bytes":1460,"dir":2,"interval":543},{"bytes":113,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"x0.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51490,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":2317,"s2c_bytes":4527,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":9670,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":147},{"bytes":348,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":91}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51468,"dip":"106.11.62.113","dport":443,"proto":"tcp","c2s_bytes":1063,"s2c_bytes":4251,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":19944,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":558},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":291,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":217},{"bytes":407,"dir":2,"interval":25},{"bytes":272,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cnzz.mmstat.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51479,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":20799,"s2c_bytes":87791,"c2s_pkts":25,"s2c_pkts":84,"total_pkts":109,"duration":16235,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":444},{"bytes":98,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":153},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":273,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1235,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":257},{"bytes":102,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":249},{"bytes":1460,"dir":2,"interval":0},{"bytes":54,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":57},{"bytes":96,"dir":1,"interval":17},{"bytes":1460,"dir":2,"interval":74},{"bytes":1460,"dir":2,"interval":0},{"bytes":105,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":187},{"bytes":406,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":859},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":262,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":322,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1033,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":820},{"bytes":596,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":810},{"bytes":1452,"dir":1,"interval":1087},{"bytes":596,"dir":1,"interval":0},{"bytes":322,"dir":1,"interval":0},{"bytes":378,"dir":2,"interval":510},{"bytes":1452,"dir":1,"interval":466},{"bytes":596,"dir":1,"interval":4},{"bytes":322,"dir":1,"interval":1},{"bytes":377,"dir":2,"interval":397},{"bytes":1452,"dir":1,"interval":1150},{"bytes":596,"dir":1,"interval":0},{"bytes":888,"dir":1,"interval":0},{"bytes":377,"dir":2,"interval":1147},{"bytes":1452,"dir":1,"interval":536},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":406,"dir":1,"interval":0},{"bytes":378,"dir":2,"interval":545}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51455,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1039,"s2c_bytes":24313,"c2s_pkts":2,"s2c_pkts":19,"total_pkts":21,"duration":20740,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1236,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":522,"dir":1,"interval":409},{"bytes":1460,"dir":2,"interval":382},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":566,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c1.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51480,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":33223,"s2c_bytes":29684,"c2s_pkts":41,"s2c_pkts":44,"total_pkts":85,"duration":16235,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":3},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":443},{"bytes":103,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":150},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":613,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":257},{"bytes":106,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":256},{"bytes":249,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":258},{"bytes":100,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":258},{"bytes":1460,"dir":2,"interval":0},{"bytes":128,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":45},{"bytes":91,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":45},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1249,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":98},{"bytes":102,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":97},{"bytes":1460,"dir":2,"interval":0},{"bytes":301,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":372},{"bytes":596,"dir":1,"interval":0},{"bytes":858,"dir":1,"interval":16},{"bytes":378,"dir":2,"interval":408},{"bytes":1452,"dir":1,"interval":70},{"bytes":596,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":378,"dir":2,"interval":65},{"bytes":1452,"dir":1,"interval":99},{"bytes":596,"dir":1,"interval":0},{"bytes":143,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":226},{"bytes":1452,"dir":1,"interval":233},{"bytes":596,"dir":1,"interval":57},{"bytes":142,"dir":1,"interval":28},{"bytes":378,"dir":2,"interval":187},{"bytes":1452,"dir":1,"interval":479},{"bytes":596,"dir":1,"interval":0},{"bytes":817,"dir":1,"interval":0},{"bytes":377,"dir":2,"interval":477},{"bytes":1452,"dir":1,"interval":409},{"bytes":596,"dir":1,"interval":0},{"bytes":217,"dir":1,"interval":0},{"bytes":377,"dir":2,"interval":410},{"bytes":1452,"dir":1,"interval":465},{"bytes":596,"dir":1,"interval":0},{"bytes":219,"dir":1,"interval":0},{"bytes":378,"dir":2,"interval":469},{"bytes":1452,"dir":1,"interval":350},{"bytes":596,"dir":1,"interval":0},{"bytes":217,"dir":1,"interval":0},{"bytes":377,"dir":2,"interval":345},{"bytes":1452,"dir":1,"interval":807},{"bytes":596,"dir":1,"interval":0},{"bytes":1043,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":973},{"bytes":1452,"dir":1,"interval":535},{"bytes":596,"dir":1,"interval":0},{"bytes":666,"dir":1,"interval":0},{"bytes":378,"dir":2,"interval":376}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51489,"dip":"112.80.255.135","dport":443,"proto":"tcp","c2s_bytes":7679,"s2c_bytes":5189,"c2s_pkts":10,"s2c_pkts":12,"total_pkts":22,"duration":10749,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":27},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":387},{"bytes":596,"dir":1,"interval":0},{"bytes":337,"dir":1,"interval":0},{"bytes":332,"dir":2,"interval":157},{"bytes":1452,"dir":1,"interval":1696},{"bytes":596,"dir":1,"interval":4},{"bytes":341,"dir":1,"interval":0},{"bytes":332,"dir":2,"interval":1701},{"bytes":1452,"dir":1,"interval":776},{"bytes":596,"dir":1,"interval":0},{"bytes":340,"dir":1,"interval":0},{"bytes":332,"dir":2,"interval":776}],"tls":{"version":"tls1.2","sni":"fclick.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51473,"dip":"182.61.200.171","dport":443,"proto":"tcp","c2s_bytes":5900,"s2c_bytes":5171,"c2s_pkts":7,"s2c_pkts":13,"total_pkts":20,"duration":19128,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":184},{"bytes":596,"dir":1,"interval":0},{"bytes":682,"dir":1,"interval":0},{"bytes":358,"dir":2,"interval":76},{"bytes":131,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":9074},{"bytes":596,"dir":1,"interval":0},{"bytes":605,"dir":1,"interval":0},{"bytes":358,"dir":2,"interval":9075},{"bytes":131,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ada.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51435,"dip":"182.254.59.156","dport":443,"proto":"tcp","c2s_bytes":1500,"s2c_bytes":8977,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":21440,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":5},{"bytes":274,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":154},{"bytes":428,"dir":1,"interval":54},{"bytes":1460,"dir":2,"interval":80},{"bytes":179,"dir":2,"interval":0},{"bytes":429,"dir":1,"interval":1118},{"bytes":1460,"dir":2,"interval":1116},{"bytes":1460,"dir":2,"interval":0},{"bytes":2,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c0.ifengimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51389,"dip":"122.14.43.42","dport":443,"proto":"tcp","c2s_bytes":1629,"s2c_bytes":6559,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":26910,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1301,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":114},{"bytes":53,"dir":1,"interval":11},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":803,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":10},{"bytes":38,"dir":2,"interval":353},{"bytes":1460,"dir":2,"interval":6},{"bytes":491,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tva3.sinaimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51412,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":1620,"s2c_bytes":140434,"c2s_pkts":4,"s2c_pkts":101,"total_pkts":105,"duration":23128,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":323},{"bytes":492,"dir":1,"interval":108},{"bytes":1460,"dir":2,"interval":315},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":589,"dir":2,"interval":0},{"bytes":485,"dir":1,"interval":140},{"bytes":1460,"dir":2,"interval":143},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":434,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"x0.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51492,"dip":"182.61.200.6","dport":443,"proto":"tcp","c2s_bytes":2316,"s2c_bytes":4527,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":9543,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":150},{"bytes":347,"dir":1,"interval":0},{"bytes":262,"dir":2,"interval":85}],"tls":{"version":"tls1.2","sni":"sp1.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51413,"dip":"182.254.53.154","dport":443,"proto":"tcp","c2s_bytes":1135,"s2c_bytes":121587,"c2s_pkts":3,"s2c_pkts":87,"total_pkts":90,"duration":23128,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4},{"bytes":258,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":200},{"bytes":492,"dir":1,"interval":180},{"bytes":1460,"dir":2,"interval":273},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":49,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"x0.ifengimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":62316,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":52,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62318,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":43,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":3},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62317,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":267,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":62319,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":276,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51362,"dip":"182.61.200.178","dport":443,"proto":"tcp","c2s_bytes":2540,"s2c_bytes":4514,"c2s_pkts":3,"s2c_pkts":12,"total_pkts":15,"duration":30387,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1022,"dir":1,"interval":367},{"bytes":1001,"dir":1,"interval":0},{"bytes":189,"dir":2,"interval":214},{"bytes":101,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"gipass.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51379,"dip":"61.135.186.152","dport":443,"proto":"tcp","c2s_bytes":2487,"s2c_bytes":4542,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":30118,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":110},{"bytes":518,"dir":1,"interval":0},{"bytes":318,"dir":2,"interval":46},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"nsclick.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51376,"dip":"111.202.114.42","dport":443,"proto":"tcp","c2s_bytes":2706,"s2c_bytes":4371,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":30182,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1256,"dir":1,"interval":173},{"bytes":933,"dir":1,"interval":0},{"bytes":147,"dir":2,"interval":48},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"hmma.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51364,"dip":"182.61.200.17","dport":443,"proto":"tcp","c2s_bytes":3633,"s2c_bytes":4986,"c2s_pkts":10,"s2c_pkts":21,"total_pkts":31,"duration":30858,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":367},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":707,"dir":1,"interval":0},{"bytes":822,"dir":1,"interval":0},{"bytes":75,"dir":2,"interval":204},{"bytes":38,"dir":1,"interval":16},{"bytes":38,"dir":2,"interval":8},{"bytes":42,"dir":2,"interval":11},{"bytes":91,"dir":2,"interval":13},{"bytes":109,"dir":2,"interval":1},{"bytes":817,"dir":1,"interval":447},{"bytes":534,"dir":1,"interval":0},{"bytes":53,"dir":1,"interval":3},{"bytes":42,"dir":2,"interval":425},{"bytes":45,"dir":2,"interval":6},{"bytes":76,"dir":2,"interval":0},{"bytes":140,"dir":2,"interval":11},{"bytes":72,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"sofire.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51375,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":1629,"s2c_bytes":3693,"c2s_pkts":3,"s2c_pkts":9,"total_pkts":12,"duration":30626,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":1081,"dir":1,"interval":348},{"bytes":227,"dir":2,"interval":44},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30268}],"tls":{"version":"tls1.2","sni":"httpsdns.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51506,"dip":"17.248.161.5","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":811,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":459,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":92}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51493,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3642,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":609,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":34},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51514,"dip":"49.234.161.244","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3642,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":250,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":34},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":62347,"dip":"111.231.186.161","dport":443,"proto":"tcp","c2s_bytes":490,"s2c_bytes":4019,"c2s_pkts":3,"s2c_pkts":9,"total_pkts":12,"duration":1382,"packets":[{"bytes":176,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":426,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36},{"bytes":277,"dir":1,"interval":852},{"bytes":195,"dir":2,"interval":66},{"bytes":41,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":37,"dir":1,"interval":495},{"bytes":33,"dir":2,"interval":495},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ws.pinduoduo.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51520,"dip":"49.234.161.244","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3642,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":236,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":62455,"dip":"121.51.52.115","dport":443,"proto":"tcp","c2s_bytes":1485,"s2c_bytes":5685,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":449,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":271},{"bytes":53,"dir":1,"interval":8},{"bytes":38,"dir":1,"interval":0},{"bytes":644,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":54},{"bytes":1051,"dir":2,"interval":100},{"bytes":31,"dir":1,"interval":164}],"tls":{"version":"tls1.2","sni":"ccdn.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":51515,"dip":"49.234.161.244","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3642,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":730,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":35},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51386,"dip":"17.167.194.230","dport":443,"proto":"tcp","c2s_bytes":1346,"s2c_bytes":3782,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":31344,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1173,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":175},{"bytes":126,"dir":1,"interval":539},{"bytes":307,"dir":1,"interval":4},{"bytes":365,"dir":1,"interval":0},{"bytes":319,"dir":2,"interval":197},{"bytes":31,"dir":1,"interval":30800}],"tls":{"version":"tls1.2","sni":"gsp64-ssl.ls.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51532,"dip":"182.254.21.113","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4203,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":129,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"btrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51531,"dip":"182.254.21.113","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4203,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":129,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"btrace.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51460,"dip":"180.149.144.191","dport":443,"proto":"tcp","c2s_bytes":2262,"s2c_bytes":4785,"c2s_pkts":8,"s2c_pkts":14,"total_pkts":22,"duration":30180,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":6},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":128},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":75,"dir":2,"interval":60},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":8},{"bytes":316,"dir":2,"interval":39},{"bytes":138,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":30000},{"bytes":31,"dir":1,"interval":30042}],"tls":{"version":"tls1.2","sni":"voice.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50923,"dip":"123.125.22.241","dport":443,"proto":"tcp","c2s_bytes":11644,"s2c_bytes":4955,"c2s_pkts":21,"s2c_pkts":15,"total_pkts":36,"duration":208784,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":897,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":18},{"bytes":51,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":151,"dir":1,"interval":0},{"bytes":51,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":51,"dir":2,"interval":7},{"bytes":169,"dir":2,"interval":3},{"bytes":69,"dir":1,"interval":18},{"bytes":635,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":16},{"bytes":239,"dir":2,"interval":7},{"bytes":69,"dir":1,"interval":12},{"bytes":1460,"dir":1,"interval":0},{"bytes":428,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":7},{"bytes":178,"dir":2,"interval":25},{"bytes":69,"dir":1,"interval":28694},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":28668},{"bytes":1460,"dir":1,"interval":0},{"bytes":588,"dir":1,"interval":0},{"bytes":178,"dir":2,"interval":13},{"bytes":46,"dir":2,"interval":180000},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180026}],"tls":{"version":"tls1.2","sni":"api.weibo.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51535,"dip":"121.51.68.123","dport":443,"proto":"tcp","c2s_bytes":936,"s2c_bytes":268232,"c2s_pkts":7,"s2c_pkts":193,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":297},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":2},{"bytes":194,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":65},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":153,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":930,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":540,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":163},{"bytes":1460,"dir":2,"interval":107},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1170,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":656,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mcdn.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51036,"dip":"103.216.43.76","dport":443,"proto":"tcp","c2s_bytes":2368,"s2c_bytes":97919,"c2s_pkts":23,"s2c_pkts":78,"total_pkts":101,"duration":181249,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":145},{"bytes":51,"dir":2,"interval":144},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":168},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":236,"dir":1,"interval":0},{"bytes":95,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":323,"dir":2,"interval":169},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":50},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":71},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1446,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":232},{"bytes":95,"dir":1,"interval":98},{"bytes":1419,"dir":2,"interval":131},{"bytes":96,"dir":1,"interval":4},{"bytes":85,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":244,"dir":2,"interval":0},{"bytes":972,"dir":2,"interval":0},{"bytes":83,"dir":1,"interval":59},{"bytes":1460,"dir":2,"interval":59},{"bytes":473,"dir":2,"interval":0},{"bytes":89,"dir":1,"interval":21},{"bytes":90,"dir":1,"interval":0},{"bytes":1054,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":635,"dir":2,"interval":0},{"bytes":90,"dir":1,"interval":62},{"bytes":958,"dir":2,"interval":61},{"bytes":92,"dir":1,"interval":47},{"bytes":86,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":47},{"bytes":566,"dir":2,"interval":0},{"bytes":1158,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":53},{"bytes":1460,"dir":2,"interval":53},{"bytes":243,"dir":2,"interval":0},{"bytes":82,"dir":1,"interval":28},{"bytes":1460,"dir":2,"interval":28},{"bytes":1244,"dir":2,"interval":0},{"bytes":88,"dir":1,"interval":308},{"bytes":1460,"dir":2,"interval":308},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":168},{"bytes":1460,"dir":2,"interval":0},{"bytes":56,"dir":2,"interval":5},{"bytes":46,"dir":2,"interval":179825},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180021}],"tls":{"version":"tls1.2","sni":"m.iqiyipic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51064,"dip":"120.192.64.19","dport":443,"proto":"tcp","c2s_bytes":1126,"s2c_bytes":5103,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":180782,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":585,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":76},{"bytes":51,"dir":2,"interval":235},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":234},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":302,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":395,"dir":2,"interval":316},{"bytes":1030,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":180118},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180463}],"tls":{"version":"tls1.2","sni":"v-78c04013.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51068,"dip":"180.97.210.140","dport":443,"proto":"tcp","c2s_bytes":1167,"s2c_bytes":154709,"c2s_pkts":9,"s2c_pkts":113,"total_pkts":122,"duration":180733,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":585,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":113},{"bytes":51,"dir":2,"interval":111},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":117},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":301,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":4},{"bytes":399,"dir":2,"interval":130},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":211},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":405},{"bytes":1448,"dir":2,"interval":172},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":621,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":156},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":142},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":105},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":96},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":867,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179504},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180092}],"tls":{"version":"tls1.2","sni":"v-b461d28c.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51534,"dip":"182.18.17.14","dport":443,"proto":"tcp","c2s_bytes":3669,"s2c_bytes":213782,"c2s_pkts":28,"s2c_pkts":172,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":553,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":4},{"bytes":349,"dir":2,"interval":1},{"bytes":523,"dir":1,"interval":65},{"bytes":58,"dir":1,"interval":81},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":304,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":86},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":31,"dir":1,"interval":13},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":17},{"bytes":130,"dir":1,"interval":22},{"bytes":134,"dir":1,"interval":12},{"bytes":1448,"dir":2,"interval":66},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1401,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":12},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":117,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":215},{"bytes":129,"dir":1,"interval":47},{"bytes":1448,"dir":2,"interval":237},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":36,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":93},{"bytes":130,"dir":1,"interval":5288},{"bytes":35,"dir":1,"interval":12},{"bytes":130,"dir":1,"interval":5},{"bytes":35,"dir":1,"interval":31},{"bytes":130,"dir":1,"interval":2},{"bytes":1448,"dir":2,"interval":5458},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1202,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":121},{"bytes":129,"dir":1,"interval":533},{"bytes":1448,"dir":2,"interval":741},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":164,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":267},{"bytes":1448,"dir":2,"interval":150},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":718,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":130,"dir":1,"interval":369},{"bytes":1448,"dir":2,"interval":368},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":171,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":120},{"bytes":1448,"dir":2,"interval":145},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":934,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":312},{"bytes":1448,"dir":2,"interval":459},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":153,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":127,"dir":1,"interval":220},{"bytes":1448,"dir":2,"interval":47},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":128,"dir":1,"interval":381},{"bytes":1448,"dir":2,"interval":377},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":950,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":127,"dir":1,"interval":459},{"bytes":1448,"dir":2,"interval":522},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t00img.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51517,"dip":"121.51.68.244","dport":443,"proto":"tcp","c2s_bytes":5934,"s2c_bytes":126732,"c2s_pkts":61,"s2c_pkts":139,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":34},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":249},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":279,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":55},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":492,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":738,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":101},{"bytes":1460,"dir":2,"interval":66},{"bytes":1117,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":14151},{"bytes":104,"dir":1,"interval":12},{"bytes":42,"dir":1,"interval":5},{"bytes":42,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":14153},{"bytes":734,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":32},{"bytes":104,"dir":1,"interval":1},{"bytes":42,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":34},{"bytes":734,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":734,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":122},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":16},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":104},{"bytes":1460,"dir":2,"interval":0},{"bytes":372,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":162},{"bytes":1460,"dir":2,"interval":145},{"bytes":1460,"dir":2,"interval":0},{"bytes":350,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":177},{"bytes":1460,"dir":2,"interval":177},{"bytes":1460,"dir":2,"interval":0},{"bytes":134,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":209},{"bytes":1460,"dir":2,"interval":210},{"bytes":1247,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":151},{"bytes":1460,"dir":2,"interval":151},{"bytes":513,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":98},{"bytes":1460,"dir":2,"interval":97},{"bytes":559,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":71},{"bytes":1460,"dir":2,"interval":72},{"bytes":133,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":123},{"bytes":105,"dir":1,"interval":10},{"bytes":1460,"dir":2,"interval":124},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":409,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":55},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":13},{"bytes":1460,"dir":2,"interval":32},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":167,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":32},{"bytes":1460,"dir":2,"interval":0},{"bytes":818,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":93},{"bytes":1460,"dir":2,"interval":72},{"bytes":989,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":53},{"bytes":1460,"dir":2,"interval":53},{"bytes":1460,"dir":2,"interval":0},{"bytes":122,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":179},{"bytes":1460,"dir":2,"interval":179},{"bytes":1460,"dir":2,"interval":0},{"bytes":862,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":128},{"bytes":1460,"dir":2,"interval":127},{"bytes":1178,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":112,"dir":1,"interval":175},{"bytes":702,"dir":2,"interval":175},{"bytes":111,"dir":1,"interval":42},{"bytes":676,"dir":2,"interval":41},{"bytes":105,"dir":1,"interval":36},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":578,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":264},{"bytes":104,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":266},{"bytes":1201,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":930,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":182},{"bytes":104,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":146},{"bytes":1460,"dir":2,"interval":0},{"bytes":1070,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":1075,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":84},{"bytes":1460,"dir":2,"interval":54},{"bytes":1180,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":76},{"bytes":1460,"dir":2,"interval":76},{"bytes":960,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":335},{"bytes":104,"dir":1,"interval":27},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":335},{"bytes":379,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":68},{"bytes":1460,"dir":2,"interval":100},{"bytes":379,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":79},{"bytes":1460,"dir":2,"interval":79},{"bytes":1460,"dir":2,"interval":0},{"bytes":755,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":121},{"bytes":1460,"dir":2,"interval":121},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":668,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":279},{"bytes":112,"dir":1,"interval":0},{"bytes":698,"dir":2,"interval":313},{"bytes":42,"dir":1,"interval":110},{"bytes":103,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":110},{"bytes":1460,"dir":2,"interval":0},{"bytes":473,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t20img.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59772,"dip":"221.195.244.227","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":3169,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":235191,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":35},{"bytes":234,"dir":2,"interval":37},{"bytes":61,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120000},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":51129,"dip":"103.216.43.76","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":4662,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":180852,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":133},{"bytes":51,"dir":2,"interval":131},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":178},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":216,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":177},{"bytes":716,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":180529},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180540}],"tls":{"version":"tls1.2","sni":"m.iqiyipic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51571,"dip":"212.129.151.100","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3662,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":623,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":439,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":36},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mobile.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":63169,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":56,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":4},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":63171,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":55,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":63172,"dip":"153.37.235.67","dport":443,"proto":"tcp","c2s_bytes":192,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":234,"packets":[{"bytes":192,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":6},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sjws-tls.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":63179,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":150,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":63178,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":153,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51243,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":1307,"s2c_bytes":4624,"c2s_pkts":10,"s2c_pkts":11,"total_pkts":21,"duration":121156,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":195},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":221,"dir":1,"interval":0},{"bytes":61,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":27},{"bytes":55,"dir":2,"interval":5},{"bytes":126,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":126,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120957}],"tls":{"version":"tls1.2","sni":"mtrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61633,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":403,"s2c_bytes":7070,"c2s_pkts":2,"s2c_pkts":12,"total_pkts":14,"duration":60093,"packets":[{"bytes":165,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":5},{"bytes":51,"dir":2,"interval":0},{"bytes":238,"dir":1,"interval":143},{"bytes":1053,"dir":2,"interval":55},{"bytes":1460,"dir":2,"interval":0},{"bytes":646,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":59945}],"tls":{"version":"tls1.2","sni":"","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":63181,"dip":"153.37.235.67","dport":443,"proto":"tcp","c2s_bytes":198,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":456,"packets":[{"bytes":198,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sjws-tls.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51574,"dip":"121.51.112.79","dport":443,"proto":"tcp","c2s_bytes":936,"s2c_bytes":268252,"c2s_pkts":7,"s2c_pkts":193,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":35},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":306},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":194,"dir":1,"interval":1},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":86},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":173,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":930,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":465,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":122},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":656,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":29},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mcdn.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51584,"dip":"17.248.156.75","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3582,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":749,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":359,"dir":2,"interval":7},{"bytes":258,"dir":2,"interval":197},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"metrics.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61643,"dip":"182.61.128.198","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4374,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":73704,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pics0.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61641,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":188,"s2c_bytes":4311,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":73705,"packets":[{"bytes":188,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":3},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":73622}],"tls":{"version":"tls1.2","sni":"feed.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":61634,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":185,"s2c_bytes":4311,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":73715,"packets":[{"bytes":185,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":73587}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":51573,"dip":"61.135.186.152","dport":443,"proto":"tcp","c2s_bytes":1646,"s2c_bytes":4542,"c2s_pkts":2,"s2c_pkts":11,"total_pkts":13,"duration":14469,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1129,"dir":1,"interval":133},{"bytes":318,"dir":2,"interval":37},{"bytes":31,"dir":2,"interval":14326}],"tls":{"version":"tls1.2","sni":"nsclick.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51530,"dip":"118.25.34.139","dport":443,"proto":"tcp","c2s_bytes":59791,"s2c_bytes":4879,"c2s_pkts":49,"s2c_pkts":9,"total_pkts":58,"duration":44621,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":441,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":35},{"bytes":602,"dir":1,"interval":765},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":3},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":3},{"bytes":1062,"dir":1,"interval":2},{"bytes":260,"dir":2,"interval":112},{"bytes":603,"dir":1,"interval":6065},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":48},{"bytes":353,"dir":1,"interval":0},{"bytes":260,"dir":2,"interval":6105},{"bytes":603,"dir":1,"interval":10046},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":5},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":14},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1435,"dir":1,"interval":0},{"bytes":260,"dir":2,"interval":10082},{"bytes":602,"dir":1,"interval":9898},{"bytes":1440,"dir":1,"interval":4},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":342,"dir":1,"interval":0},{"bytes":260,"dir":2,"interval":9940},{"bytes":602,"dir":1,"interval":9993},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":591,"dir":1,"interval":4},{"bytes":260,"dir":2,"interval":9963},{"bytes":31,"dir":1,"interval":7740}],"tls":{"version":"tls1.2","sni":"tne.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":62456,"dip":"111.231.186.161","dport":443,"proto":"tcp","c2s_bytes":536,"s2c_bytes":3955,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":46124,"packets":[{"bytes":208,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":426,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42},{"bytes":51,"dir":1,"interval":294},{"bytes":277,"dir":1,"interval":4},{"bytes":195,"dir":2,"interval":60},{"bytes":41,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ws.pinduoduo.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":62342,"dip":"121.51.52.115","dport":443,"proto":"tcp","c2s_bytes":1473,"s2c_bytes":5427,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":47515,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":35},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1169},{"bytes":53,"dir":1,"interval":6},{"bytes":38,"dir":1,"interval":0},{"bytes":632,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":56},{"bytes":793,"dir":2,"interval":35},{"bytes":31,"dir":1,"interval":46335}],"tls":{"version":"tls1.2","sni":"ccdn.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62461,"dip":"121.51.52.115","dport":443,"proto":"tcp","c2s_bytes":1473,"s2c_bytes":37871,"c2s_pkts":8,"s2c_pkts":32,"total_pkts":40,"duration":45683,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":315},{"bytes":53,"dir":1,"interval":4},{"bytes":38,"dir":1,"interval":0},{"bytes":632,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":8},{"bytes":38,"dir":2,"interval":60},{"bytes":1460,"dir":2,"interval":41},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":373,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":45354}],"tls":{"version":"tls1.2","sni":"ccdn.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62335,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1807,"s2c_bytes":4055,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":47516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":35},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1221},{"bytes":53,"dir":1,"interval":6},{"bytes":38,"dir":1,"interval":0},{"bytes":626,"dir":1,"interval":0},{"bytes":378,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":51},{"bytes":42,"dir":2,"interval":34},{"bytes":247,"dir":2,"interval":4},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":46287}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62336,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1815,"s2c_bytes":10063,"c2s_pkts":8,"s2c_pkts":14,"total_pkts":22,"duration":47516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1226},{"bytes":53,"dir":1,"interval":4},{"bytes":38,"dir":1,"interval":0},{"bytes":622,"dir":1,"interval":0},{"bytes":390,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":51},{"bytes":42,"dir":2,"interval":40},{"bytes":1328,"dir":2,"interval":11},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":6,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":649,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":46284}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62578,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":4700,"s2c_bytes":15274,"c2s_pkts":10,"s2c_pkts":18,"total_pkts":28,"duration":37761,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":35},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":289},{"bytes":53,"dir":1,"interval":16},{"bytes":38,"dir":1,"interval":0},{"bytes":631,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":386,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":79},{"bytes":42,"dir":2,"interval":2},{"bytes":1328,"dir":2,"interval":49},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":6,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":17},{"bytes":295,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":37452}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62696,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1499,"s2c_bytes":4009,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":36138,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":30},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":375},{"bytes":53,"dir":1,"interval":101},{"bytes":38,"dir":1,"interval":0},{"bytes":628,"dir":1,"interval":0},{"bytes":68,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":274},{"bytes":42,"dir":2,"interval":29},{"bytes":249,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":81},{"bytes":31,"dir":1,"interval":35580}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62699,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1497,"s2c_bytes":4047,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":35383,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":306},{"bytes":53,"dir":1,"interval":5},{"bytes":38,"dir":1,"interval":0},{"bytes":627,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":67,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":99},{"bytes":42,"dir":2,"interval":29},{"bytes":239,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":35068}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62701,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1497,"s2c_bytes":4047,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":34504,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":375},{"bytes":53,"dir":1,"interval":5},{"bytes":38,"dir":1,"interval":0},{"bytes":627,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":10},{"bytes":67,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":110},{"bytes":42,"dir":2,"interval":40},{"bytes":239,"dir":2,"interval":2},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":34112}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62702,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1500,"s2c_bytes":4047,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":34034,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":286},{"bytes":53,"dir":1,"interval":3},{"bytes":38,"dir":1,"interval":0},{"bytes":630,"dir":1,"interval":0},{"bytes":67,"dir":1,"interval":3},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":55},{"bytes":42,"dir":2,"interval":39},{"bytes":239,"dir":2,"interval":2},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33740}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62703,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1500,"s2c_bytes":4009,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":33879,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":333},{"bytes":53,"dir":1,"interval":16},{"bytes":38,"dir":1,"interval":0},{"bytes":630,"dir":1,"interval":0},{"bytes":67,"dir":1,"interval":1},{"bytes":38,"dir":1,"interval":5},{"bytes":38,"dir":2,"interval":68},{"bytes":42,"dir":2,"interval":39},{"bytes":249,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33523}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62707,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1498,"s2c_bytes":4047,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":33766,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":257},{"bytes":53,"dir":1,"interval":46},{"bytes":38,"dir":1,"interval":0},{"bytes":628,"dir":1,"interval":0},{"bytes":67,"dir":1,"interval":6},{"bytes":38,"dir":1,"interval":23},{"bytes":38,"dir":2,"interval":88},{"bytes":42,"dir":2,"interval":35},{"bytes":239,"dir":2,"interval":2},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33432}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62708,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1500,"s2c_bytes":4047,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":33621,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":283},{"bytes":53,"dir":1,"interval":8},{"bytes":38,"dir":1,"interval":0},{"bytes":630,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":67,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":63},{"bytes":42,"dir":2,"interval":35},{"bytes":239,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33325}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62711,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1499,"s2c_bytes":4009,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":33221,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":34},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":287},{"bytes":53,"dir":1,"interval":6},{"bytes":38,"dir":1,"interval":0},{"bytes":628,"dir":1,"interval":0},{"bytes":68,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":88},{"bytes":42,"dir":2,"interval":34},{"bytes":249,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32918}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":62714,"dip":"49.234.162.15","dport":443,"proto":"tcp","c2s_bytes":1499,"s2c_bytes":4047,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":32879,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":282},{"bytes":53,"dir":1,"interval":81},{"bytes":38,"dir":1,"interval":0},{"bytes":629,"dir":1,"interval":0},{"bytes":67,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":12},{"bytes":38,"dir":2,"interval":153},{"bytes":42,"dir":2,"interval":28},{"bytes":239,"dir":2,"interval":2},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32501}],"tls":{"version":"tls1.2","sni":"meta.yangkeduo.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[0,11,10,13,15,16,21]}}
{"sip":"192.168.50.193","sport":63063,"dip":"121.22.232.213","dport":443,"proto":"tcp","c2s_bytes":1800,"s2c_bytes":3715,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":17663,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":688},{"bytes":45,"dir":1,"interval":50},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1008,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":123},{"bytes":515,"dir":2,"interval":31},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":76}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":51341,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":1799,"s2c_bytes":4870,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":102518,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1436,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":503},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":934,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":87},{"bytes":42,"dir":2,"interval":36},{"bytes":109,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":102005}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51268,"dip":"103.216.43.56","dport":443,"proto":"tcp","c2s_bytes":1224,"s2c_bytes":6261,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":129341,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":107},{"bytes":53,"dir":1,"interval":16},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":367,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":74},{"bytes":1448,"dir":2,"interval":2},{"bytes":979,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":129215}],"tls":{"version":"tls1.2","sni":"v-67d82b38.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51206,"dip":"103.44.59.45","dport":443,"proto":"tcp","c2s_bytes":1797,"s2c_bytes":4497,"c2s_pkts":10,"s2c_pkts":9,"total_pkts":19,"duration":162274,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":420,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":564},{"bytes":53,"dir":1,"interval":162},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":416,"dir":1,"interval":0},{"bytes":263,"dir":1,"interval":0},{"bytes":261,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":226},{"bytes":270,"dir":2,"interval":0},{"bytes":269,"dir":2,"interval":4},{"bytes":269,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":161542}],"tls":{"version":"tls1.2","sni":"msg.qy.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51313,"dip":"103.216.43.35","dport":443,"proto":"tcp","c2s_bytes":1226,"s2c_bytes":6771,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":113329,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":77},{"bytes":53,"dir":1,"interval":9},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":369,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":25},{"bytes":38,"dir":1,"interval":2},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":113237}],"tls":{"version":"tls1.2","sni":"v-67d82b23.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51201,"dip":"103.216.43.76","dport":443,"proto":"tcp","c2s_bytes":1321,"s2c_bytes":23809,"c2s_pkts":11,"s2c_pkts":21,"total_pkts":32,"duration":170037,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":763,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2996},{"bytes":53,"dir":1,"interval":523},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":227,"dir":1,"interval":0},{"bytes":73,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":2095},{"bytes":1224,"dir":2,"interval":1},{"bytes":521,"dir":2,"interval":0},{"bytes":1165,"dir":2,"interval":0},{"bytes":74,"dir":1,"interval":17},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":213},{"bytes":31,"dir":1,"interval":166284}],"tls":{"version":"tls1.2","sni":"m.iqiyipic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51609,"dip":"182.254.48.159","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":4348,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":277,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1377,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":272},{"bytes":51,"dir":2,"interval":269}],"tls":{"version":"tls1.2","sni":"t20img.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51621,"dip":"182.18.17.76","dport":443,"proto":"tcp","c2s_bytes":2807,"s2c_bytes":240849,"c2s_pkts":20,"s2c_pkts":180,"total_pkts":200,"duration":0,"packets":[{"bytes":589,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":553,"dir":2,"interval":0},{"bytes":80,"dir":1,"interval":19},{"bytes":46,"dir":1,"interval":2},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":303,"dir":1,"interval":0},{"bytes":129,"dir":1,"interval":0},{"bytes":287,"dir":2,"interval":13},{"bytes":287,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":2},{"bytes":31,"dir":1,"interval":5},{"bytes":1448,"dir":2,"interval":37},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":237,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":399,"dir":2,"interval":0},{"bytes":134,"dir":1,"interval":1110},{"bytes":1448,"dir":2,"interval":1117},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":612,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":128},{"bytes":1448,"dir":2,"interval":102},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":658,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":297},{"bytes":1448,"dir":2,"interval":290},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":273,"dir":2,"interval":0},{"bytes":127,"dir":1,"interval":190},{"bytes":1448,"dir":2,"interval":184},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":8,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":310},{"bytes":1448,"dir":2,"interval":285},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":726,"dir":2,"interval":0},{"bytes":130,"dir":1,"interval":392},{"bytes":1448,"dir":2,"interval":386},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":702,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":164},{"bytes":1448,"dir":2,"interval":156},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":505,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":761},{"bytes":129,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":762},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":718,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1178,"dir":2,"interval":0},{"bytes":128,"dir":1,"interval":537},{"bytes":1448,"dir":2,"interval":554},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":136,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1057,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":128,"dir":1,"interval":720},{"bytes":130,"dir":1,"interval":-452},{"bytes":1448,"dir":2,"interval":692},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":709,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":81},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t00img.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51636,"dip":"121.51.68.244","dport":443,"proto":"tcp","c2s_bytes":5199,"s2c_bytes":150736,"c2s_pkts":48,"s2c_pkts":152,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1377,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":75},{"bytes":51,"dir":2,"interval":73},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":48},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":279,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":1},{"bytes":993,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1159,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1132,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":84},{"bytes":1460,"dir":2,"interval":84},{"bytes":938,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":108},{"bytes":105,"dir":1,"interval":-48},{"bytes":1460,"dir":2,"interval":108},{"bytes":1460,"dir":2,"interval":0},{"bytes":107,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":126},{"bytes":291,"dir":2,"interval":63},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":19,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":87},{"bytes":105,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":88},{"bytes":1460,"dir":2,"interval":0},{"bytes":220,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1035,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":131},{"bytes":104,"dir":1,"interval":192},{"bytes":105,"dir":1,"interval":17},{"bytes":1460,"dir":2,"interval":60},{"bytes":1460,"dir":2,"interval":0},{"bytes":330,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1068,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":84},{"bytes":1460,"dir":2,"interval":84},{"bytes":1081,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":53},{"bytes":1460,"dir":2,"interval":55},{"bytes":1448,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":129},{"bytes":105,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":128},{"bytes":1460,"dir":2,"interval":0},{"bytes":405,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":103,"dir":1,"interval":143},{"bytes":105,"dir":1,"interval":20},{"bytes":361,"dir":2,"interval":142},{"bytes":1460,"dir":2,"interval":1},{"bytes":1158,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":497,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":63},{"bytes":1460,"dir":2,"interval":63},{"bytes":1460,"dir":2,"interval":0},{"bytes":244,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":85},{"bytes":1460,"dir":2,"interval":86},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":288,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":224},{"bytes":104,"dir":1,"interval":26},{"bytes":1460,"dir":2,"interval":223},{"bytes":1460,"dir":2,"interval":0},{"bytes":1279,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":65},{"bytes":954,"dir":2,"interval":64},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":128},{"bytes":1460,"dir":2,"interval":108},{"bytes":1460,"dir":2,"interval":0},{"bytes":620,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1240,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":97},{"bytes":105,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":99},{"bytes":1419,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":114},{"bytes":104,"dir":1,"interval":33},{"bytes":38,"dir":2,"interval":111},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":508,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":43},{"bytes":104,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":692,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":78},{"bytes":680,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":205},{"bytes":104,"dir":1,"interval":16},{"bytes":1460,"dir":2,"interval":127},{"bytes":1460,"dir":2,"interval":0},{"bytes":1163,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":504,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":67},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":116,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":241},{"bytes":1460,"dir":2,"interval":240},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1336,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":106},{"bytes":103,"dir":1,"interval":870},{"bytes":1460,"dir":2,"interval":763},{"bytes":1001,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":357},{"bytes":1460,"dir":2,"interval":357},{"bytes":1460,"dir":2,"interval":0},{"bytes":234,"dir":2,"interval":75},{"bytes":104,"dir":1,"interval":142},{"bytes":1460,"dir":2,"interval":66},{"bytes":950,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":134},{"bytes":105,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":1},{"bytes":42,"dir":1,"interval":0},{"bytes":104,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":388},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":69},{"bytes":492,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":709},{"bytes":1460,"dir":2,"interval":387},{"bytes":1178,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t20img.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51027,"dip":"103.216.43.76","dport":443,"proto":"tcp","c2s_bytes":3829,"s2c_bytes":122760,"c2s_pkts":22,"s2c_pkts":93,"total_pkts":115,"duration":221806,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":154},{"bytes":51,"dir":2,"interval":153},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":168},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":266,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":168},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":731,"dir":2,"interval":0},{"bytes":414,"dir":1,"interval":547},{"bytes":399,"dir":1,"interval":0},{"bytes":399,"dir":1,"interval":0},{"bytes":398,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":546},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":50},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":61},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":101},{"bytes":445,"dir":2,"interval":0},{"bytes":144,"dir":1,"interval":39855},{"bytes":144,"dir":1,"interval":0},{"bytes":128,"dir":1,"interval":0},{"bytes":107,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":39588},{"bytes":1460,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":1,"interval":118},{"bytes":113,"dir":1,"interval":0},{"bytes":111,"dir":1,"interval":0},{"bytes":115,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":122},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":896,"dir":2,"interval":0},{"bytes":124,"dir":1,"interval":375},{"bytes":1460,"dir":2,"interval":339},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1194,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":180000},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180586},{"bytes":31,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"cmts.iqiyi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":63847,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2277,"s2c_bytes":3777,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":123,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":525,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":82},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":81},{"bytes":720,"dir":1,"interval":12},{"bytes":1226,"dir":1,"interval":0},{"bytes":321,"dir":2,"interval":23}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":63058,"dip":"220.243.131.102","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":3544,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":34368,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":6},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":1273}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":64186,"dip":"111.47.223.176","dport":443,"proto":"tcp","c2s_bytes":802,"s2c_bytes":278649,"c2s_pkts":5,"s2c_pkts":195,"total_pkts":200,"duration":0,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":384,"dir":2,"interval":45},{"bytes":75,"dir":1,"interval":85},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":39},{"bytes":503,"dir":1,"interval":33},{"bytes":446,"dir":2,"interval":35},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":12},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":44},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":15},{"bytes":1448,"dir":2,"interval":15},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":15},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":69},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dldir1.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":63625,"dip":"111.231.177.166","dport":443,"proto":"tcp","c2s_bytes":647,"s2c_bytes":3811,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":30230,"packets":[{"bytes":176,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":454,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":188},{"bytes":51,"dir":1,"interval":-42},{"bytes":51,"dir":2,"interval":179},{"bytes":277,"dir":1,"interval":87},{"bytes":195,"dir":2,"interval":45},{"bytes":167,"dir":2,"interval":0},{"bytes":37,"dir":1,"interval":29937},{"bytes":33,"dir":2,"interval":29936},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":59}],"tls":{"version":"tls1.2","sni":"ws.pinduoduo.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51626,"dip":"118.25.34.139","dport":443,"proto":"tcp","c2s_bytes":7520,"s2c_bytes":3660,"c2s_pkts":8,"s2c_pkts":5,"total_pkts":13,"duration":31324,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":469,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":72},{"bytes":51,"dir":2,"interval":68},{"bytes":1440,"dir":1,"interval":754},{"bytes":1440,"dir":1,"interval":46},{"bytes":1440,"dir":1,"interval":-492},{"bytes":1440,"dir":1,"interval":492},{"bytes":1086,"dir":1,"interval":73},{"bytes":260,"dir":2,"interval":875},{"bytes":31,"dir":1,"interval":30378}],"tls":{"version":"tls1.2","sni":"tne.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51599,"dip":"212.129.151.101","dport":443,"proto":"tcp","c2s_bytes":20665,"s2c_bytes":5613,"c2s_pkts":37,"s2c_pkts":28,"total_pkts":65,"duration":34352,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":463,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":169},{"bytes":51,"dir":2,"interval":166},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":47},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":391,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":43},{"bytes":42,"dir":2,"interval":0},{"bytes":1049,"dir":1,"interval":188},{"bytes":391,"dir":1,"interval":0},{"bytes":1280,"dir":1,"interval":39},{"bytes":150,"dir":2,"interval":234},{"bytes":795,"dir":1,"interval":1188},{"bytes":42,"dir":2,"interval":1182},{"bytes":150,"dir":2,"interval":1},{"bytes":62,"dir":1,"interval":319},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":319},{"bytes":150,"dir":2,"interval":0},{"bytes":62,"dir":1,"interval":2268},{"bytes":1185,"dir":1,"interval":1},{"bytes":42,"dir":2,"interval":2266},{"bytes":150,"dir":2,"interval":3},{"bytes":62,"dir":1,"interval":1077},{"bytes":1440,"dir":1,"interval":0},{"bytes":466,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1076},{"bytes":150,"dir":2,"interval":1},{"bytes":62,"dir":1,"interval":1268},{"bytes":1440,"dir":1,"interval":0},{"bytes":305,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1265},{"bytes":150,"dir":2,"interval":2},{"bytes":62,"dir":1,"interval":685},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":413,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":682},{"bytes":150,"dir":2,"interval":3},{"bytes":62,"dir":1,"interval":1012},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":1257,"dir":1,"interval":11},{"bytes":42,"dir":2,"interval":1010},{"bytes":150,"dir":2,"interval":14},{"bytes":62,"dir":1,"interval":4638},{"bytes":392,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":4635},{"bytes":150,"dir":2,"interval":2},{"bytes":62,"dir":1,"interval":1013},{"bytes":444,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1011},{"bytes":150,"dir":2,"interval":2},{"bytes":62,"dir":1,"interval":9568},{"bytes":442,"dir":1,"interval":1},{"bytes":42,"dir":2,"interval":9566},{"bytes":150,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"th.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51625,"dip":"182.254.53.143","dport":443,"proto":"tcp","c2s_bytes":1315,"s2c_bytes":15609,"c2s_pkts":9,"s2c_pkts":18,"total_pkts":27,"duration":32266,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1377,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":943},{"bytes":51,"dir":2,"interval":941},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":14},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":279,"dir":1,"interval":0},{"bytes":105,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":578,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":1570},{"bytes":1460,"dir":2,"interval":1569},{"bytes":367,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"t21img.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51640,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":2512,"s2c_bytes":4018,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31275,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":845,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":120},{"bytes":51,"dir":2,"interval":112},{"bytes":487,"dir":1,"interval":116},{"bytes":1351,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":120},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30994}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51252,"dip":"103.216.43.57","dport":443,"proto":"tcp","c2s_bytes":1226,"s2c_bytes":21932,"c2s_pkts":8,"s2c_pkts":21,"total_pkts":29,"duration":180242,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":251},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":14},{"bytes":42,"dir":1,"interval":0},{"bytes":369,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":28},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":645,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":162774},{"bytes":46,"dir":2,"interval":179968},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v-67d82b39.71edge.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51675,"dip":"203.205.179.240","dport":443,"proto":"tcp","c2s_bytes":1655,"s2c_bytes":4945,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":21880,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":297,"dir":2,"interval":454},{"bytes":118,"dir":1,"interval":913},{"bytes":43,"dir":2,"interval":449},{"bytes":656,"dir":1,"interval":468},{"bytes":341,"dir":1,"interval":0},{"bytes":486,"dir":2,"interval":529},{"bytes":23,"dir":2,"interval":19993},{"bytes":23,"dir":1,"interval":20496}],"tls":{"version":"tls1.2","sni":"mttstr.beacon.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51653,"dip":"58.250.137.37","dport":443,"proto":"tcp","c2s_bytes":1799,"s2c_bytes":5819,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":30695,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1281,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":59},{"bytes":51,"dir":2,"interval":52},{"bytes":532,"dir":1,"interval":51},{"bytes":593,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":128},{"bytes":167,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30542}],"tls":{"version":"tls1.2","sni":"sdk.e.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51678,"dip":"203.205.179.240","dport":443,"proto":"tcp","c2s_bytes":1820,"s2c_bytes":4740,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":22674,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":297,"dir":2,"interval":455},{"bytes":118,"dir":1,"interval":915},{"bytes":43,"dir":2,"interval":454},{"bytes":693,"dir":1,"interval":454},{"bytes":469,"dir":1,"interval":0},{"bytes":281,"dir":2,"interval":1283},{"bytes":23,"dir":2,"interval":20009},{"bytes":23,"dir":1,"interval":21304}],"tls":{"version":"tls1.2","sni":"mtteve.beacon.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51673,"dip":"113.96.237.160","dport":443,"proto":"tcp","c2s_bytes":2121,"s2c_bytes":4722,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":31684,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1297,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":533},{"bytes":51,"dir":2,"interval":529},{"bytes":636,"dir":1,"interval":159},{"bytes":811,"dir":1,"interval":1},{"bytes":494,"dir":2,"interval":169},{"bytes":31,"dir":1,"interval":30949}],"tls":{"version":"tls1.2","sni":"ios.rqd.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51744,"dip":"123.125.114.8","dport":443,"proto":"tcp","c2s_bytes":2666,"s2c_bytes":4244,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":114,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":96,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":58},{"bytes":6,"dir":2,"interval":53},{"bytes":45,"dir":2,"interval":0},{"bytes":1095,"dir":1,"interval":8},{"bytes":928,"dir":1,"interval":20},{"bytes":147,"dir":2,"interval":30}],"tls":{"version":"tls1.2","sni":"hmma.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51685,"dip":"182.254.22.163","dport":443,"proto":"tcp","c2s_bytes":2349,"s2c_bytes":65202,"c2s_pkts":5,"s2c_pkts":50,"total_pkts":55,"duration":31037,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":540,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":55},{"bytes":51,"dir":2,"interval":57},{"bytes":1440,"dir":1,"interval":15},{"bytes":235,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":431},{"bytes":55,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":605,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":9},{"bytes":1440,"dir":2,"interval":0},{"bytes":126,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":16},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":9},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":1},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":5},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":1},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":12},{"bytes":1440,"dir":2,"interval":0},{"bytes":855,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30962}],"tls":{"version":"tls1.2","sni":"us.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51705,"dip":"121.51.23.103","dport":443,"proto":"tcp","c2s_bytes":1508,"s2c_bytes":10490,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30406,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":59},{"bytes":51,"dir":2,"interval":56},{"bytes":834,"dir":1,"interval":45},{"bytes":1428,"dir":2,"interval":122},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":396,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30259}],"tls":{"version":"tls1.2","sni":"i.y.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51683,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":4056,"s2c_bytes":133810,"c2s_pkts":8,"s2c_pkts":98,"total_pkts":106,"duration":43577,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":17},{"bytes":640,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1096,"dir":2,"interval":0},{"bytes":711,"dir":1,"interval":12456},{"bytes":1460,"dir":2,"interval":12458},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1388,"dir":2,"interval":0},{"bytes":708,"dir":1,"interval":189},{"bytes":1362,"dir":2,"interval":183},{"bytes":711,"dir":1,"interval":25},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":74},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":461},{"bytes":1460,"dir":2,"interval":377},{"bytes":1460,"dir":2,"interval":0},{"bytes":585,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30422}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51725,"dip":"182.254.57.120","dport":443,"proto":"tcp","c2s_bytes":1623,"s2c_bytes":8529,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":30366,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":934,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":16},{"bytes":51,"dir":2,"interval":16},{"bytes":757,"dir":1,"interval":14},{"bytes":1440,"dir":2,"interval":16},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":344,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30329}],"tls":{"version":"tls1.2","sni":"thirdwx.qlogo.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51682,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":4047,"s2c_bytes":64152,"c2s_pkts":8,"s2c_pkts":48,"total_pkts":56,"duration":43577,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":17},{"bytes":629,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1414,"dir":2,"interval":0},{"bytes":711,"dir":1,"interval":12456},{"bytes":1460,"dir":2,"interval":12455},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":323,"dir":2,"interval":30},{"bytes":710,"dir":1,"interval":197},{"bytes":1026,"dir":2,"interval":166},{"bytes":711,"dir":1,"interval":17},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":-1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":-1},{"bytes":921,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-1},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-1},{"bytes":921,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":52},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1193,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":461},{"bytes":1434,"dir":2,"interval":376},{"bytes":31,"dir":1,"interval":30422}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51724,"dip":"182.254.57.120","dport":443,"proto":"tcp","c2s_bytes":1626,"s2c_bytes":6252,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30403,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":949,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":17},{"bytes":51,"dir":2,"interval":17},{"bytes":760,"dir":1,"interval":8},{"bytes":1440,"dir":2,"interval":12},{"bytes":932,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30372}],"tls":{"version":"tls1.2","sni":"thirdwx.qlogo.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51711,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":2121,"s2c_bytes":8249,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":30896,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":152,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":17},{"bytes":712,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":221,"dir":2,"interval":0},{"bytes":810,"dir":1,"interval":115},{"bytes":1460,"dir":2,"interval":113},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30758}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51681,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":4677,"s2c_bytes":83607,"c2s_pkts":9,"s2c_pkts":64,"total_pkts":73,"duration":43867,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":259,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":130},{"bytes":51,"dir":2,"interval":127},{"bytes":593,"dir":1,"interval":94},{"bytes":790,"dir":2,"interval":98},{"bytes":711,"dir":1,"interval":12538},{"bytes":1460,"dir":2,"interval":12535},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":29},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":0},{"bytes":633,"dir":1,"interval":186},{"bytes":1460,"dir":2,"interval":164},{"bytes":1460,"dir":2,"interval":0},{"bytes":560,"dir":2,"interval":0},{"bytes":711,"dir":1,"interval":28},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":317,"dir":2,"interval":0},{"bytes":668,"dir":1,"interval":126},{"bytes":1460,"dir":2,"interval":94},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":33,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":335},{"bytes":1460,"dir":2,"interval":335},{"bytes":1460,"dir":2,"interval":0},{"bytes":645,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30422}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51662,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":3771,"s2c_bytes":22673,"c2s_pkts":7,"s2c_pkts":20,"total_pkts":27,"duration":54462,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1415,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":17},{"bytes":51,"dir":2,"interval":16},{"bytes":485,"dir":1,"interval":30},{"bytes":1460,"dir":2,"interval":29},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":136,"dir":2,"interval":0},{"bytes":770,"dir":1,"interval":10445},{"bytes":1460,"dir":2,"interval":10446},{"bytes":351,"dir":2,"interval":0},{"bytes":888,"dir":1,"interval":12865},{"bytes":1460,"dir":2,"interval":12864},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":720,"dir":2,"interval":0},{"bytes":954,"dir":1,"interval":225},{"bytes":1460,"dir":2,"interval":226},{"bytes":99,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30872}],"tls":{"version":"tls1.2","sni":"y.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51710,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":2317,"s2c_bytes":22352,"c2s_pkts":5,"s2c_pkts":18,"total_pkts":23,"duration":31073,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":39},{"bytes":862,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":46},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":618,"dir":2,"interval":0},{"bytes":856,"dir":1,"interval":158},{"bytes":1460,"dir":2,"interval":165},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":775,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30861}],"tls":{"version":"tls1.2","sni":"y.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51706,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":1470,"s2c_bytes":1435,"c2s_pkts":4,"s2c_pkts":2,"total_pkts":6,"duration":31072,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":39},{"bytes":871,"dir":1,"interval":6},{"bytes":1298,"dir":2,"interval":46},{"bytes":31,"dir":1,"interval":31018}],"tls":{"version":"tls1.2","sni":"y.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51708,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":1433,"s2c_bytes":4764,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31075,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":40},{"bytes":834,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":47},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":247,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31018}],"tls":{"version":"tls1.2","sni":"y.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51712,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":1310,"s2c_bytes":22687,"c2s_pkts":4,"s2c_pkts":17,"total_pkts":21,"duration":30792,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":26},{"bytes":711,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":34},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1189,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30749}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51707,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":2702,"s2c_bytes":35331,"c2s_pkts":6,"s2c_pkts":27,"total_pkts":33,"duration":31075,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":45},{"bytes":704,"dir":1,"interval":1},{"bytes":1026,"dir":2,"interval":49},{"bytes":711,"dir":1,"interval":135},{"bytes":1460,"dir":2,"interval":141},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1255,"dir":2,"interval":0},{"bytes":688,"dir":1,"interval":469},{"bytes":1460,"dir":2,"interval":457},{"bytes":1460,"dir":2,"interval":0},{"bytes":950,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30415}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51713,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":1310,"s2c_bytes":16913,"c2s_pkts":4,"s2c_pkts":13,"total_pkts":17,"duration":30792,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":29},{"bytes":711,"dir":1,"interval":33},{"bytes":1460,"dir":2,"interval":63},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1255,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30720}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51714,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":1297,"s2c_bytes":3430,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":30792,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":28},{"bytes":698,"dir":1,"interval":33},{"bytes":1460,"dir":2,"interval":63},{"bytes":1460,"dir":2,"interval":0},{"bytes":373,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30720}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51709,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":1432,"s2c_bytes":27223,"c2s_pkts":4,"s2c_pkts":20,"total_pkts":24,"duration":31075,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":39},{"bytes":833,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":47},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1345,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31018}],"tls":{"version":"tls1.2","sni":"y.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51718,"dip":"121.51.23.103","dport":443,"proto":"tcp","c2s_bytes":1880,"s2c_bytes":8503,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":30729,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":61},{"bytes":51,"dir":2,"interval":57},{"bytes":971,"dir":1,"interval":48},{"bytes":235,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":113},{"bytes":1440,"dir":2,"interval":0},{"bytes":1241,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30577}],"tls":{"version":"tls1.2","sni":"c.y.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51729,"dip":"121.51.12.100","dport":443,"proto":"tcp","c2s_bytes":1377,"s2c_bytes":10254,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":31305,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":328},{"bytes":51,"dir":2,"interval":325},{"bytes":703,"dir":1,"interval":84},{"bytes":1440,"dir":2,"interval":90},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":283,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30847}],"tls":{"version":"tls1.2","sni":"thirdqq.qlogo.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51726,"dip":"121.51.12.100","dport":443,"proto":"tcp","c2s_bytes":2078,"s2c_bytes":13283,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":31328,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1304,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":94},{"bytes":51,"dir":2,"interval":91},{"bytes":702,"dir":1,"interval":237},{"bytes":1428,"dir":2,"interval":240},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1049,"dir":2,"interval":0},{"bytes":702,"dir":1,"interval":86},{"bytes":1428,"dir":2,"interval":88},{"bytes":1428,"dir":2,"interval":0},{"bytes":883,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30863}],"tls":{"version":"tls1.2","sni":"thirdqq.qlogo.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51728,"dip":"121.51.12.100","dport":443,"proto":"tcp","c2s_bytes":1376,"s2c_bytes":10875,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":31306,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":321},{"bytes":51,"dir":2,"interval":318},{"bytes":702,"dir":1,"interval":91},{"bytes":1440,"dir":2,"interval":97},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":904,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30847}],"tls":{"version":"tls1.2","sni":"thirdqq.qlogo.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51723,"dip":"121.51.12.100","dport":443,"proto":"tcp","c2s_bytes":4189,"s2c_bytes":26675,"c2s_pkts":8,"s2c_pkts":22,"total_pkts":30,"duration":31531,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1319,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":70},{"bytes":51,"dir":2,"interval":67},{"bytes":704,"dir":1,"interval":59},{"bytes":1428,"dir":2,"interval":65},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":553,"dir":2,"interval":0},{"bytes":702,"dir":1,"interval":61},{"bytes":1428,"dir":2,"interval":59},{"bytes":1428,"dir":2,"interval":0},{"bytes":1388,"dir":2,"interval":0},{"bytes":704,"dir":1,"interval":65},{"bytes":1428,"dir":2,"interval":64},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":702,"dir":1,"interval":276},{"bytes":1428,"dir":2,"interval":277},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":755,"dir":2,"interval":0},{"bytes":703,"dir":1,"interval":103},{"bytes":1428,"dir":2,"interval":103},{"bytes":1428,"dir":2,"interval":0},{"bytes":432,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30845}],"tls":{"version":"tls1.2","sni":"thirdqq.qlogo.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51727,"dip":"121.51.12.100","dport":443,"proto":"tcp","c2s_bytes":1376,"s2c_bytes":6581,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31307,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1304,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":337},{"bytes":51,"dir":2,"interval":334},{"bytes":702,"dir":1,"interval":75},{"bytes":1428,"dir":2,"interval":80},{"bytes":942,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30847}],"tls":{"version":"tls1.2","sni":"thirdqq.qlogo.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51730,"dip":"121.51.12.100","dport":443,"proto":"tcp","c2s_bytes":1377,"s2c_bytes":9440,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":31308,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":334},{"bytes":51,"dir":2,"interval":331},{"bytes":703,"dir":1,"interval":78},{"bytes":1440,"dir":2,"interval":80},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":909,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30847}],"tls":{"version":"tls1.2","sni":"thirdqq.qlogo.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":64198,"dip":"210.22.247.162","dport":443,"proto":"tcp","c2s_bytes":61711,"s2c_bytes":133957,"c2s_pkts":79,"s2c_pkts":121,"total_pkts":200,"duration":0,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":52},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":45},{"bytes":655,"dir":1,"interval":96},{"bytes":938,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":132},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":348,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":72},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":944,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":325},{"bytes":808,"dir":1,"interval":0},{"bytes":653,"dir":2,"interval":262},{"bytes":656,"dir":1,"interval":81},{"bytes":1170,"dir":1,"interval":1},{"bytes":402,"dir":2,"interval":50},{"bytes":655,"dir":1,"interval":108},{"bytes":865,"dir":1,"interval":0},{"bytes":364,"dir":2,"interval":135},{"bytes":655,"dir":1,"interval":3486},{"bytes":954,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":3497},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1291,"dir":2,"interval":32},{"bytes":656,"dir":1,"interval":3668},{"bytes":1099,"dir":1,"interval":0},{"bytes":842,"dir":2,"interval":3590},{"bytes":655,"dir":1,"interval":8880},{"bytes":884,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":8910},{"bytes":127,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":1163},{"bytes":908,"dir":1,"interval":1},{"bytes":844,"dir":2,"interval":1167},{"bytes":655,"dir":1,"interval":82},{"bytes":973,"dir":1,"interval":1},{"bytes":632,"dir":2,"interval":51},{"bytes":655,"dir":1,"interval":55},{"bytes":808,"dir":1,"interval":7},{"bytes":1440,"dir":2,"interval":76},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":328,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":29},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":782,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":92},{"bytes":912,"dir":1,"interval":0},{"bytes":365,"dir":2,"interval":74},{"bytes":656,"dir":1,"interval":73},{"bytes":1355,"dir":1,"interval":0},{"bytes":394,"dir":2,"interval":61},{"bytes":655,"dir":1,"interval":60},{"bytes":973,"dir":1,"interval":0},{"bytes":545,"dir":2,"interval":77},{"bytes":655,"dir":1,"interval":77},{"bytes":822,"dir":1,"interval":0},{"bytes":322,"dir":2,"interval":47},{"bytes":655,"dir":1,"interval":43},{"bytes":802,"dir":1,"interval":0},{"bytes":331,"dir":2,"interval":43},{"bytes":655,"dir":1,"interval":263},{"bytes":843,"dir":1,"interval":1},{"bytes":347,"dir":2,"interval":265},{"bytes":655,"dir":1,"interval":105},{"bytes":877,"dir":1,"interval":0},{"bytes":322,"dir":2,"interval":108},{"bytes":655,"dir":1,"interval":51},{"bytes":864,"dir":1,"interval":2},{"bytes":352,"dir":2,"interval":75},{"bytes":655,"dir":1,"interval":74},{"bytes":939,"dir":1,"interval":1},{"bytes":359,"dir":2,"interval":81},{"bytes":655,"dir":1,"interval":94},{"bytes":1028,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":66},{"bytes":506,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":87},{"bytes":1028,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":85},{"bytes":504,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":140},{"bytes":939,"dir":1,"interval":0},{"bytes":360,"dir":2,"interval":171},{"bytes":656,"dir":1,"interval":147},{"bytes":1359,"dir":1,"interval":8},{"bytes":385,"dir":2,"interval":135},{"bytes":656,"dir":1,"interval":1125},{"bytes":1440,"dir":1,"interval":0},{"bytes":259,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":1157},{"bytes":1440,"dir":2,"interval":0},{"bytes":84,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":0},{"bytes":656,"dir":1,"interval":323},{"bytes":1368,"dir":1,"interval":24},{"bytes":395,"dir":2,"interval":320},{"bytes":655,"dir":1,"interval":105},{"bytes":776,"dir":1,"interval":0},{"bytes":1101,"dir":2,"interval":116},{"bytes":656,"dir":1,"interval":245},{"bytes":1170,"dir":1,"interval":0},{"bytes":1269,"dir":2,"interval":234},{"bytes":655,"dir":1,"interval":4221},{"bytes":954,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":4259},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":29},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1103,"dir":2,"interval":0},{"bytes":656,"dir":1,"interval":4046},{"bytes":1418,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":3990},{"bytes":596,"dir":2,"interval":0},{"bytes":656,"dir":1,"interval":94},{"bytes":1072,"dir":1,"interval":1},{"bytes":1440,"dir":2,"interval":208},{"bytes":1440,"dir":2,"interval":0},{"bytes":84,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":900,"dir":2,"interval":37},{"bytes":655,"dir":1,"interval":1640},{"bytes":928,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":1477},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":45},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1043,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":10106},{"bytes":830,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":10059},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":348,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":53},{"bytes":1318,"dir":2,"interval":0},{"bytes":656,"dir":1,"interval":2696},{"bytes":1099,"dir":1,"interval":0},{"bytes":832,"dir":2,"interval":2635},{"bytes":655,"dir":1,"interval":7444},{"bytes":964,"dir":1,"interval":0},{"bytes":545,"dir":2,"interval":7469},{"bytes":655,"dir":1,"interval":1368},{"bytes":845,"dir":1,"interval":0},{"bytes":625,"dir":2,"interval":1342},{"bytes":655,"dir":1,"interval":181},{"bytes":868,"dir":1,"interval":0},{"bytes":352,"dir":2,"interval":212},{"bytes":656,"dir":1,"interval":256},{"bytes":1030,"dir":1,"interval":530}],"tls":{"version":"tls1.2","sni":"u.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64180,"dip":"182.254.58.161","dport":443,"proto":"tcp","c2s_bytes":3203,"s2c_bytes":17098,"c2s_pkts":7,"s2c_pkts":15,"total_pkts":22,"duration":62385,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":93},{"bytes":51,"dir":1,"interval":1523},{"bytes":51,"dir":2,"interval":1613},{"bytes":655,"dir":1,"interval":236},{"bytes":839,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":322},{"bytes":1440,"dir":2,"interval":0},{"bytes":84,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1199,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":441},{"bytes":758,"dir":1,"interval":0},{"bytes":314,"dir":2,"interval":397}],"tls":{"version":"tls1.2","sni":"u.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64175,"dip":"182.254.58.161","dport":443,"proto":"tcp","c2s_bytes":4719,"s2c_bytes":5358,"c2s_pkts":10,"s2c_pkts":7,"total_pkts":17,"duration":62485,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":27},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":25},{"bytes":655,"dir":1,"interval":90},{"bytes":779,"dir":1,"interval":0},{"bytes":354,"dir":2,"interval":137},{"bytes":655,"dir":1,"interval":75},{"bytes":897,"dir":1,"interval":0},{"bytes":310,"dir":2,"interval":99},{"bytes":655,"dir":1,"interval":2144},{"bytes":782,"dir":1,"interval":3},{"bytes":323,"dir":2,"interval":2123}],"tls":{"version":"tls1.2","sni":"u.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64176,"dip":"182.254.58.161","dport":443,"proto":"tcp","c2s_bytes":3220,"s2c_bytes":6918,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":62485,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":87},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":1750},{"bytes":51,"dir":2,"interval":1834},{"bytes":655,"dir":1,"interval":327},{"bytes":758,"dir":1,"interval":0},{"bytes":625,"dir":2,"interval":374},{"bytes":655,"dir":1,"interval":167},{"bytes":856,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":167},{"bytes":482,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"u.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64201,"dip":"111.47.223.176","dport":443,"proto":"tcp","c2s_bytes":791,"s2c_bytes":16260,"c2s_pkts":4,"s2c_pkts":13,"total_pkts":17,"duration":60476,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":145,"dir":2,"interval":0},{"bytes":6,"dir":1,"interval":29},{"bytes":45,"dir":1,"interval":0},{"bytes":535,"dir":1,"interval":0},{"bytes":475,"dir":2,"interval":29},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1160,"dir":2,"interval":89}],"tls":{"version":"tls1.2","sni":"dldir1.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64199,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":875,"s2c_bytes":45577,"c2s_pkts":5,"s2c_pkts":34,"total_pkts":39,"duration":60759,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":244,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":17},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":15},{"bytes":579,"dir":1,"interval":10},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":54},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64200,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":875,"s2c_bytes":49305,"c2s_pkts":5,"s2c_pkts":36,"total_pkts":41,"duration":60761,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":244,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":24},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":20},{"bytes":579,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":1369,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51715,"dip":"182.254.58.161","dport":443,"proto":"tcp","c2s_bytes":6673,"s2c_bytes":10478,"c2s_pkts":12,"s2c_pkts":17,"total_pkts":29,"duration":45415,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":15,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":89},{"bytes":51,"dir":2,"interval":86},{"bytes":73,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":22},{"bytes":38,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":32,"dir":1,"interval":0},{"bytes":389,"dir":2,"interval":71},{"bytes":37,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":3},{"bytes":1173,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":60},{"bytes":1440,"dir":2,"interval":10},{"bytes":1167,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":162},{"bytes":86,"dir":1,"interval":0},{"bytes":231,"dir":2,"interval":209},{"bytes":37,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":45000},{"bytes":31,"dir":1,"interval":45080}],"tls":{"version":"tls1.2","sni":"u.y.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51639,"dip":"182.254.52.230","dport":443,"proto":"tcp","c2s_bytes":5247,"s2c_bytes":126720,"c2s_pkts":17,"s2c_pkts":99,"total_pkts":116,"duration":91789,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":136},{"bytes":51,"dir":2,"interval":134},{"bytes":73,"dir":2,"interval":0},{"bytes":378,"dir":1,"interval":15},{"bytes":372,"dir":1,"interval":2},{"bytes":372,"dir":1,"interval":0},{"bytes":372,"dir":1,"interval":0},{"bytes":372,"dir":1,"interval":0},{"bytes":372,"dir":1,"interval":0},{"bytes":371,"dir":1,"interval":0},{"bytes":372,"dir":1,"interval":0},{"bytes":372,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":404,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":809,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1124,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":809,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":559,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1124,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1045,"dir":2,"interval":0},{"bytes":1225,"dir":2,"interval":3},{"bytes":45,"dir":1,"interval":67},{"bytes":372,"dir":1,"interval":22},{"bytes":1460,"dir":2,"interval":91},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1124,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":372,"dir":1,"interval":14},{"bytes":372,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":61},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1417,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":184}],"tls":{"version":"tls1.2","sni":"puui.qpic.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51722,"dip":"182.254.56.82","dport":443,"proto":"tcp","c2s_bytes":3088,"s2c_bytes":4932,"c2s_pkts":6,"s2c_pkts":10,"total_pkts":16,"duration":45742,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1427,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":21},{"bytes":51,"dir":2,"interval":17},{"bytes":73,"dir":2,"interval":0},{"bytes":1161,"dir":1,"interval":12},{"bytes":268,"dir":2,"interval":91},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":88},{"bytes":1208,"dir":1,"interval":526},{"bytes":128,"dir":2,"interval":618},{"bytes":37,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":45002},{"bytes":31,"dir":1,"interval":45092}],"tls":{"version":"tls1.2","sni":"stat.y.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49608,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":84,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49611,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":99,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49612,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":80,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49613,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":107,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49610,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":273,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49616,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":83,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49617,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":118,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49614,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":304,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49620,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":100,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49622,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":94,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49623,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":99,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49621,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":99,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49619,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":335,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":51759,"dip":"112.74.137.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":6551,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":320,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":680,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"112.74.137.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49625,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":92,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49628,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":89,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":51762,"dip":"118.25.31.186","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":6551,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":326,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1272,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":716,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":31},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"118.25.31.186","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49629,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":109,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49630,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":108,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49627,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":165,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49631,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":130,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49626,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":284,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49632,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":276,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49634,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":58,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49635,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":60,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49637,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":133,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":51764,"dip":"47.98.19.153","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":6551,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":365,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":680,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"47.98.19.153","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49633,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":313,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49636,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":309,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49644,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":88,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49643,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":90,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49639,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":95,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49641,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":108,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49640,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":115,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":51765,"dip":"17.42.254.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5220,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":724,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":9},{"bytes":51,"dir":2,"interval":221}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49638,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":300,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49642,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":299,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49647,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":75,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49645,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":80,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49646,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":76,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49648,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":81,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49650,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":81,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49652,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":76,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49651,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":77,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49653,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":100,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49649,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":274,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49654,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":279,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49657,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":107,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49659,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":106,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49658,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":115,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49668,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":73,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49666,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":73,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49667,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":66,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49665,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":122,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49664,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":122,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49673,"dip":"220.194.76.31","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":68,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49672,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":265,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49683,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":254,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49686,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":125,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49685,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":125,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49687,"dip":"220.194.76.124","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":298,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49689,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":115,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49693,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":116,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49695,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":111,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49694,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":143,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49700,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":77,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49702,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":77,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49699,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":261,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49701,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":261,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49698,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":262,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49703,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":281,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49714,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":198,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49715,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":198,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49713,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":197,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49716,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":409,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49717,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":256,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49723,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":234,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49724,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":231,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49725,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":234,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49722,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":248,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49726,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":275,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49728,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":701,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49729,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":706,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49737,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":341,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49738,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":404,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49734,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":566,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49736,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":604,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49735,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":604,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49730,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1238,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49746,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":396,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49745,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":397,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49733,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1339,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49747,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":397,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49752,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":442,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49750,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":442,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49751,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":429,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49758,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":860,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49759,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":860,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49756,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":874,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49757,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":928,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49764,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":163,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49763,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":314,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49765,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":326,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49766,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":488,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49768,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":69,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":51755,"dip":"58.250.137.37","dport":443,"proto":"tcp","c2s_bytes":1606,"s2c_bytes":4524,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31874,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1253,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43},{"bytes":577,"dir":1,"interval":1456},{"bytes":481,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":260},{"bytes":31,"dir":1,"interval":30412}],"tls":{"version":"tls1.2","sni":"sdk.e.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49769,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":341,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49770,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":128,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":51763,"dip":"112.74.137.42","dport":443,"proto":"tcp","c2s_bytes":952,"s2c_bytes":6873,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":23538,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":684,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":37},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":281},{"bytes":53,"dir":1,"interval":4},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":126,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":61},{"bytes":264,"dir":2,"interval":68}],"tls":{"version":"tls1.2","sni":"api-m.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51770,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":2578,"s2c_bytes":8811,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":14825,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":447,"dir":1,"interval":271},{"bytes":1440,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"ulogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51769,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1243,"s2c_bytes":5985,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":18189,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":109},{"bytes":307,"dir":1,"interval":5},{"bytes":293,"dir":1,"interval":1},{"bytes":719,"dir":2,"interval":158}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51756,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1024,"s2c_bytes":5804,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":26744,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":107},{"bytes":306,"dir":1,"interval":2},{"bytes":75,"dir":1,"interval":0},{"bytes":538,"dir":2,"interval":134}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51768,"dip":"47.101.182.87","dport":443,"proto":"tcp","c2s_bytes":6482,"s2c_bytes":4400,"c2s_pkts":11,"s2c_pkts":8,"total_pkts":19,"duration":21662,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":322,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":126,"dir":1,"interval":219},{"bytes":311,"dir":1,"interval":6},{"bytes":1440,"dir":1,"interval":0},{"bytes":127,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":84},{"bytes":311,"dir":1,"interval":4741},{"bytes":1070,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":4780},{"bytes":311,"dir":1,"interval":5000},{"bytes":1245,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":5000},{"bytes":310,"dir":1,"interval":5048},{"bytes":714,"dir":1,"interval":6},{"bytes":225,"dir":2,"interval":5047}],"tls":{"version":"tls1.2","sni":"ylog.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51761,"dip":"212.64.99.102","dport":443,"proto":"tcp","c2s_bytes":1301,"s2c_bytes":7072,"c2s_pkts":10,"s2c_pkts":12,"total_pkts":22,"duration":26188,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1272,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":720,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":36},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":397},{"bytes":53,"dir":1,"interval":10},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":170,"dir":1,"interval":0},{"bytes":120,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":6},{"bytes":38,"dir":2,"interval":119},{"bytes":42,"dir":2,"interval":36},{"bytes":190,"dir":2,"interval":33},{"bytes":65,"dir":1,"interval":10312},{"bytes":120,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":10248},{"bytes":189,"dir":2,"interval":67}],"tls":{"version":"tls1.2","sni":"ffilelogapp.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51760,"dip":"47.107.21.49","dport":443,"proto":"tcp","c2s_bytes":990,"s2c_bytes":7190,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":26232,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":690,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":42},{"bytes":126,"dir":1,"interval":350},{"bytes":347,"dir":1,"interval":62},{"bytes":682,"dir":2,"interval":157}],"tls":{"version":"tls1.2","sni":"configapi.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51767,"dip":"47.101.30.175","dport":443,"proto":"tcp","c2s_bytes":1837,"s2c_bytes":6759,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":23355,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":684,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":234},{"bytes":53,"dir":1,"interval":5},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":153,"dir":1,"interval":0},{"bytes":858,"dir":1,"interval":1},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":60},{"bytes":42,"dir":2,"interval":29},{"bytes":108,"dir":2,"interval":28}],"tls":{"version":"tls1.2","sni":"e-stat.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51758,"dip":"180.163.26.100","dport":443,"proto":"tcp","c2s_bytes":3062,"s2c_bytes":4814,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":26477,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1304,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":533,"dir":1,"interval":233},{"bytes":723,"dir":1,"interval":0},{"bytes":186,"dir":2,"interval":133},{"bytes":533,"dir":1,"interval":10888},{"bytes":756,"dir":1,"interval":1},{"bytes":186,"dir":2,"interval":10888}],"tls":{"version":"tls1.2","sni":"ios.bugly.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51757,"dip":"112.74.137.42","dport":443,"proto":"tcp","c2s_bytes":1951,"s2c_bytes":6905,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":26681,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":684,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":39},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":276},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":155,"dir":1,"interval":0},{"bytes":970,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":56},{"bytes":42,"dir":2,"interval":38},{"bytes":254,"dir":2,"interval":54}],"tls":{"version":"tls1.2","sni":"udbdf.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51771,"dip":"193.112.238.228","dport":443,"proto":"tcp","c2s_bytes":26598,"s2c_bytes":3718,"c2s_pkts":20,"s2c_pkts":5,"total_pkts":25,"duration":6653,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":395,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":286,"dir":1,"interval":232},{"bytes":1440,"dir":1,"interval":5},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":6},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1315,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":158}],"tls":{"version":"tls1.2","sni":"statwup.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51772,"dip":"203.208.39.215","dport":443,"proto":"tcp","c2s_bytes":237,"s2c_bytes":2664,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":181,"packets":[{"bytes":237,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":863,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":42},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51779,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":207,"s2c_bytes":8811,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":358,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":13},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51781,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":8810,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":591,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51791,"dip":"203.208.43.126","dport":443,"proto":"tcp","c2s_bytes":216,"s2c_bytes":3486,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":191,"packets":[{"bytes":216,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":306,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"www.googletagmanager.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51783,"dip":"17.42.254.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5220,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":711,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":5},{"bytes":51,"dir":2,"interval":221}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51784,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":725,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":3}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":51793,"dip":"203.208.39.216","dport":443,"proto":"tcp","c2s_bytes":237,"s2c_bytes":2663,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":170,"packets":[{"bytes":237,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":862,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":46},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51805,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":207,"s2c_bytes":8812,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":368,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":13},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51650,"dip":"121.51.23.103","dport":443,"proto":"tcp","c2s_bytes":991,"s2c_bytes":4650,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":120247,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":71},{"bytes":51,"dir":2,"interval":61},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":64},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":157,"dir":2,"interval":64},{"bytes":48,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120054}],"tls":{"version":"tls1.2","sni":"121.51.23.103","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51809,"dip":"60.28.125.129","dport":443,"proto":"tcp","c2s_bytes":227,"s2c_bytes":3748,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":597,"packets":[{"bytes":227,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13}],"tls":{"version":"tls1.2","sni":"js.a.kspkg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51814,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":8812,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":494,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":15},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51815,"dip":"61.240.28.1","dport":443,"proto":"tcp","c2s_bytes":822,"s2c_bytes":286496,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":13},{"bytes":305,"dir":1,"interval":476},{"bytes":1460,"dir":2,"interval":254},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"hybrid.static.yximgs.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51808,"dip":"52.213.20.0","dport":443,"proto":"tcp","c2s_bytes":233,"s2c_bytes":3348,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1099,"packets":[{"bytes":233,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1265,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":279}],"tls":{"version":"tls1.2","sni":"events.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51813,"dip":"34.255.227.45","dport":443,"proto":"tcp","c2s_bytes":228,"s2c_bytes":3348,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":955,"packets":[{"bytes":228,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1265,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":286}],"tls":{"version":"tls1.2","sni":"t.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51852,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":207,"s2c_bytes":8811,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":307,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51853,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":212,"s2c_bytes":8812,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":270,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":6},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"alogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":49441,"dip":"121.51.23.103","dport":443,"proto":"tcp","c2s_bytes":3205,"s2c_bytes":10714,"c2s_pkts":6,"s2c_pkts":12,"total_pkts":18,"duration":74959,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":4,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43},{"bytes":45,"dir":1,"interval":948},{"bytes":670,"dir":1,"interval":5},{"bytes":678,"dir":1,"interval":0},{"bytes":280,"dir":2,"interval":169},{"bytes":663,"dir":1,"interval":28871},{"bytes":947,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":28881},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":145,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":44997}],"tls":{"version":"tls1.2","sni":"c.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64174,"dip":"121.51.23.103","dport":443,"proto":"tcp","c2s_bytes":29010,"s2c_bytes":51927,"c2s_pkts":44,"s2c_pkts":52,"total_pkts":96,"duration":143652,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":32,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":131},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":128},{"bytes":664,"dir":1,"interval":69},{"bytes":653,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":95},{"bytes":1317,"dir":2,"interval":0},{"bytes":673,"dir":1,"interval":2230},{"bytes":841,"dir":1,"interval":0},{"bytes":355,"dir":2,"interval":2211},{"bytes":677,"dir":1,"interval":528},{"bytes":643,"dir":1,"interval":0},{"bytes":853,"dir":2,"interval":530},{"bytes":672,"dir":1,"interval":166},{"bytes":660,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":167},{"bytes":667,"dir":1,"interval":5770},{"bytes":982,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":5822},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":51},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1378,"dir":2,"interval":0},{"bytes":673,"dir":1,"interval":12024},{"bytes":705,"dir":1,"interval":0},{"bytes":576,"dir":2,"interval":11920},{"bytes":687,"dir":1,"interval":74},{"bytes":637,"dir":1,"interval":0},{"bytes":309,"dir":2,"interval":78},{"bytes":682,"dir":1,"interval":68},{"bytes":737,"dir":1,"interval":0},{"bytes":252,"dir":2,"interval":61},{"bytes":673,"dir":1,"interval":538},{"bytes":798,"dir":1,"interval":0},{"bytes":369,"dir":2,"interval":584},{"bytes":663,"dir":1,"interval":177},{"bytes":957,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":131},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1069,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":1994},{"bytes":746,"dir":1,"interval":0},{"bytes":531,"dir":2,"interval":1999},{"bytes":673,"dir":1,"interval":8493},{"bytes":770,"dir":1,"interval":1},{"bytes":362,"dir":2,"interval":8512},{"bytes":673,"dir":1,"interval":850},{"bytes":770,"dir":1,"interval":5},{"bytes":1428,"dir":2,"interval":851},{"bytes":88,"dir":2,"interval":0},{"bytes":676,"dir":1,"interval":447},{"bytes":925,"dir":1,"interval":0},{"bytes":307,"dir":2,"interval":434},{"bytes":682,"dir":1,"interval":20657},{"bytes":717,"dir":1,"interval":0},{"bytes":252,"dir":2,"interval":20663},{"bytes":673,"dir":1,"interval":2028},{"bytes":798,"dir":1,"interval":-338},{"bytes":371,"dir":2,"interval":2038},{"bytes":663,"dir":1,"interval":580},{"bytes":963,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":226},{"bytes":1428,"dir":2,"interval":0},{"bytes":494,"dir":2,"interval":0},{"bytes":680,"dir":1,"interval":10095},{"bytes":643,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":10105},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":495,"dir":2,"interval":0},{"bytes":669,"dir":1,"interval":68},{"bytes":643,"dir":1,"interval":0},{"bytes":312,"dir":2,"interval":53},{"bytes":676,"dir":1,"interval":260},{"bytes":643,"dir":1,"interval":-176},{"bytes":332,"dir":2,"interval":295},{"bytes":31,"dir":2,"interval":45000}],"tls":{"version":"tls1.2","sni":"c.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64203,"dip":"183.214.42.176","dport":443,"proto":"tcp","c2s_bytes":1430,"s2c_bytes":24283,"c2s_pkts":6,"s2c_pkts":21,"total_pkts":27,"duration":140596,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":384,"dir":2,"interval":67},{"bytes":75,"dir":1,"interval":117},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":49},{"bytes":539,"dir":1,"interval":32},{"bytes":450,"dir":2,"interval":32},{"bytes":1286,"dir":2,"interval":36},{"bytes":592,"dir":1,"interval":40005},{"bytes":473,"dir":2,"interval":39970},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":167,"dir":2,"interval":29}],"tls":{"version":"tls1.2","sni":"dldir1.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51788,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":1282,"s2c_bytes":4222,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":30734,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":388,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":691,"dir":1,"interval":293},{"bytes":43,"dir":1,"interval":0},{"bytes":672,"dir":2,"interval":47},{"bytes":31,"dir":1,"interval":30435}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51780,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1600,"s2c_bytes":3791,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":31365,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":673},{"bytes":627,"dir":1,"interval":3},{"bytes":299,"dir":1,"interval":0},{"bytes":239,"dir":2,"interval":29},{"bytes":31,"dir":1,"interval":30683}],"tls":{"version":"tls1.2","sni":"push.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51862,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1428,"s2c_bytes":280015,"c2s_pkts":4,"s2c_pkts":196,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":91},{"bytes":58,"dir":1,"interval":28},{"bytes":330,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":0},{"bytes":69,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"zres.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51790,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":2684,"s2c_bytes":3848,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":30972,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":314},{"bytes":361,"dir":1,"interval":6},{"bytes":1452,"dir":1,"interval":0},{"bytes":197,"dir":1,"interval":0},{"bytes":296,"dir":2,"interval":36},{"bytes":31,"dir":1,"interval":30644}],"tls":{"version":"tls1.2","sni":"gdfp.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51857,"dip":"110.75.134.34","dport":443,"proto":"tcp","c2s_bytes":893,"s2c_bytes":7016,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":1100,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1241,"dir":2,"interval":6},{"bytes":298,"dir":2,"interval":45},{"bytes":376,"dir":1,"interval":899},{"bytes":1381,"dir":2,"interval":110}],"tls":{"version":"tls1.2","sni":"mdap.alipay.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51773,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":3435,"s2c_bytes":6693,"c2s_pkts":9,"s2c_pkts":8,"total_pkts":17,"duration":36139,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":216},{"bytes":621,"dir":1,"interval":5},{"bytes":206,"dir":1,"interval":0},{"bytes":324,"dir":2,"interval":107},{"bytes":681,"dir":1,"interval":4698},{"bytes":363,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":4714},{"bytes":1020,"dir":2,"interval":0},{"bytes":684,"dir":1,"interval":524},{"bytes":206,"dir":1,"interval":0},{"bytes":349,"dir":2,"interval":524},{"bytes":31,"dir":1,"interval":30689}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51804,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":1571,"s2c_bytes":3864,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":31167,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":12},{"bytes":126,"dir":1,"interval":247},{"bytes":691,"dir":1,"interval":120},{"bytes":206,"dir":1,"interval":0},{"bytes":327,"dir":2,"interval":257},{"bytes":31,"dir":1,"interval":30795}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51869,"dip":"122.14.43.172","dport":443,"proto":"tcp","c2s_bytes":1044,"s2c_bytes":4831,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":244},{"bytes":53,"dir":1,"interval":212},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":187,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":285},{"bytes":693,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":46},{"bytes":31,"dir":1,"interval":11}],"tls":{"version":"tls1.2","sni":"h5.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51840,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1279,"s2c_bytes":3822,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":30821,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":2},{"bytes":374,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":8},{"bytes":126,"dir":1,"interval":368},{"bytes":605,"dir":1,"interval":81},{"bytes":270,"dir":2,"interval":334},{"bytes":31,"dir":1,"interval":30364}],"tls":{"version":"tls1.2","sni":"upload.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51842,"dip":"120.133.135.36","dport":443,"proto":"tcp","c2s_bytes":933,"s2c_bytes":2770,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":30541,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":750,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":35},{"bytes":126,"dir":1,"interval":261},{"bytes":259,"dir":1,"interval":4},{"bytes":270,"dir":2,"interval":143},{"bytes":31,"dir":1,"interval":30263}],"tls":{"version":"tls1.2","sni":"apihn1.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51841,"dip":"103.107.217.130","dport":443,"proto":"tcp","c2s_bytes":933,"s2c_bytes":3838,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31271,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":392},{"bytes":259,"dir":1,"interval":113},{"bytes":270,"dir":2,"interval":203},{"bytes":31,"dir":1,"interval":30760}],"tls":{"version":"tls1.2","sni":"upload.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51830,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":1884,"s2c_bytes":3024,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":33434,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":378},{"bytes":605,"dir":1,"interval":37},{"bytes":270,"dir":2,"interval":57},{"bytes":605,"dir":1,"interval":2784},{"bytes":270,"dir":2,"interval":2779},{"bytes":31,"dir":1,"interval":30230}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51827,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":2489,"s2c_bytes":4362,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":35318,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":177},{"bytes":605,"dir":1,"interval":3},{"bytes":270,"dir":2,"interval":18},{"bytes":605,"dir":1,"interval":3944},{"bytes":270,"dir":2,"interval":3944},{"bytes":605,"dir":1,"interval":345},{"bytes":270,"dir":2,"interval":345},{"bytes":31,"dir":1,"interval":30843}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51835,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":1451,"s2c_bytes":3309,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":33936,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":11},{"bytes":126,"dir":1,"interval":476},{"bytes":259,"dir":1,"interval":78},{"bytes":270,"dir":2,"interval":219},{"bytes":259,"dir":1,"interval":2175},{"bytes":270,"dir":2,"interval":2168},{"bytes":259,"dir":1,"interval":393},{"bytes":270,"dir":2,"interval":393},{"bytes":31,"dir":1,"interval":30807}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51843,"dip":"120.133.135.36","dport":443,"proto":"tcp","c2s_bytes":1279,"s2c_bytes":2754,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":31126,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":750,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":33},{"bytes":126,"dir":1,"interval":200},{"bytes":605,"dir":1,"interval":4},{"bytes":270,"dir":2,"interval":68},{"bytes":31,"dir":1,"interval":30909}],"tls":{"version":"tls1.2","sni":"apihn1.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51872,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1867,"s2c_bytes":256389,"c2s_pkts":13,"s2c_pkts":187,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":85},{"bytes":58,"dir":1,"interval":23},{"bytes":46,"dir":1,"interval":6},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":197,"dir":1,"interval":0},{"bytes":95,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":810,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":123},{"bytes":1460,"dir":2,"interval":120},{"bytes":1014,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1236,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":90,"dir":1,"interval":164},{"bytes":1460,"dir":2,"interval":162},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":479,"dir":2,"interval":0},{"bytes":95,"dir":1,"interval":196},{"bytes":1460,"dir":2,"interval":193},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1017,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":404,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1145,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":31},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":728,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"g.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51811,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":7142,"s2c_bytes":3317,"c2s_pkts":11,"s2c_pkts":6,"total_pkts":17,"duration":43535,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":742,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":22},{"bytes":126,"dir":1,"interval":509},{"bytes":706,"dir":1,"interval":68},{"bytes":1452,"dir":1,"interval":35},{"bytes":1452,"dir":1,"interval":84},{"bytes":363,"dir":1,"interval":0},{"bytes":294,"dir":2,"interval":283},{"bytes":681,"dir":1,"interval":4060},{"bytes":891,"dir":1,"interval":30},{"bytes":262,"dir":2,"interval":4118},{"bytes":689,"dir":1,"interval":7842},{"bytes":234,"dir":1,"interval":1},{"bytes":293,"dir":2,"interval":7820},{"bytes":31,"dir":1,"interval":30884}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49741,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":3187,"s2c_bytes":120654,"c2s_pkts":7,"s2c_pkts":90,"total_pkts":97,"duration":65305,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":216,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":45,"dir":1,"interval":89},{"bytes":603,"dir":1,"interval":6},{"bytes":1064,"dir":2,"interval":29},{"bytes":587,"dir":1,"interval":12},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":249,"dir":2,"interval":0},{"bytes":581,"dir":1,"interval":18},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":325,"dir":2,"interval":0},{"bytes":581,"dir":1,"interval":102},{"bytes":1460,"dir":2,"interval":92},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":107,"dir":2,"interval":0},{"bytes":588,"dir":1,"interval":68},{"bytes":1460,"dir":2,"interval":68},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":840,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":64994}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51818,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":7352,"s2c_bytes":4604,"c2s_pkts":17,"s2c_pkts":10,"total_pkts":27,"duration":47513,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":13},{"bytes":126,"dir":1,"interval":590},{"bytes":689,"dir":1,"interval":17},{"bytes":266,"dir":1,"interval":0},{"bytes":300,"dir":2,"interval":177},{"bytes":689,"dir":1,"interval":968},{"bytes":266,"dir":1,"interval":0},{"bytes":301,"dir":2,"interval":951},{"bytes":689,"dir":1,"interval":1373},{"bytes":264,"dir":1,"interval":0},{"bytes":301,"dir":2,"interval":1382},{"bytes":689,"dir":1,"interval":680},{"bytes":265,"dir":1,"interval":0},{"bytes":301,"dir":2,"interval":670},{"bytes":689,"dir":1,"interval":7873},{"bytes":264,"dir":1,"interval":0},{"bytes":300,"dir":2,"interval":7874},{"bytes":689,"dir":1,"interval":4601},{"bytes":265,"dir":1,"interval":0},{"bytes":301,"dir":2,"interval":4602},{"bytes":689,"dir":1,"interval":835},{"bytes":265,"dir":1,"interval":0},{"bytes":301,"dir":2,"interval":837},{"bytes":31,"dir":1,"interval":30571}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51787,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":18853,"s2c_bytes":41952,"c2s_pkts":40,"s2c_pkts":42,"total_pkts":82,"duration":54261,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":756,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":401},{"bytes":679,"dir":1,"interval":5},{"bytes":218,"dir":1,"interval":0},{"bytes":263,"dir":2,"interval":35},{"bytes":679,"dir":1,"interval":2733},{"bytes":218,"dir":1,"interval":0},{"bytes":263,"dir":2,"interval":2813},{"bytes":686,"dir":1,"interval":294},{"bytes":206,"dir":1,"interval":0},{"bytes":312,"dir":2,"interval":226},{"bytes":682,"dir":1,"interval":122},{"bytes":206,"dir":1,"interval":0},{"bytes":668,"dir":2,"interval":124},{"bytes":689,"dir":1,"interval":97},{"bytes":224,"dir":1,"interval":5},{"bytes":656,"dir":2,"interval":101},{"bytes":685,"dir":1,"interval":474},{"bytes":221,"dir":1,"interval":0},{"bytes":953,"dir":2,"interval":461},{"bytes":687,"dir":1,"interval":327},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":364},{"bytes":1452,"dir":2,"interval":0},{"bytes":619,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":1798},{"bytes":234,"dir":1,"interval":1},{"bytes":1452,"dir":2,"interval":1792},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":365,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":1367},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":1367},{"bytes":1452,"dir":2,"interval":0},{"bytes":29,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":684},{"bytes":234,"dir":1,"interval":1},{"bytes":1452,"dir":2,"interval":904},{"bytes":1452,"dir":2,"interval":0},{"bytes":781,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":7868},{"bytes":234,"dir":1,"interval":5},{"bytes":1452,"dir":2,"interval":7775},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":454,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":2390},{"bytes":255,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":2325},{"bytes":658,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":361},{"bytes":255,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":478},{"bytes":479,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":455},{"bytes":255,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":296},{"bytes":558,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":377},{"bytes":255,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":363},{"bytes":590,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":1017},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":1117},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":198,"dir":2,"interval":0},{"bytes":687,"dir":1,"interval":835},{"bytes":234,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":741},{"bytes":1452,"dir":2,"interval":0},{"bytes":819,"dir":2,"interval":0},{"bytes":696,"dir":1,"interval":1517},{"bytes":1452,"dir":1,"interval":12},{"bytes":423,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":1487},{"bytes":31,"dir":1,"interval":31103}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51789,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":2150,"s2c_bytes":4079,"c2s_pkts":7,"s2c_pkts":6,"total_pkts":13,"duration":54805,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":359,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":283},{"bytes":691,"dir":1,"interval":8},{"bytes":47,"dir":1,"interval":0},{"bytes":279,"dir":2,"interval":86},{"bytes":691,"dir":1,"interval":24119},{"bytes":47,"dir":1,"interval":0},{"bytes":279,"dir":2,"interval":24100},{"bytes":31,"dir":1,"interval":30387}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51782,"dip":"103.107.217.69","dport":443,"proto":"tcp","c2s_bytes":2309,"s2c_bytes":4667,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":55106,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":677,"dir":1,"interval":284},{"bytes":350,"dir":1,"interval":1},{"bytes":430,"dir":2,"interval":44},{"bytes":691,"dir":1,"interval":24427},{"bytes":43,"dir":1,"interval":0},{"bytes":672,"dir":2,"interval":24433},{"bytes":31,"dir":1,"interval":30386}],"tls":{"version":"tls1.2","sni":"zt.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51855,"dip":"203.119.169.57","dport":443,"proto":"tcp","c2s_bytes":1024,"s2c_bytes":7802,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":30111,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":140,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":73,"dir":2,"interval":0},{"bytes":507,"dir":1,"interval":102},{"bytes":31,"dir":2,"interval":30037}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51879,"dip":"185.151.204.9","dport":443,"proto":"tcp","c2s_bytes":8254,"s2c_bytes":4170,"c2s_pkts":8,"s2c_pkts":6,"total_pkts":14,"duration":1065,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":153,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":175},{"bytes":326,"dir":1,"interval":568},{"bytes":1448,"dir":1,"interval":1},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":4},{"bytes":171,"dir":1,"interval":0},{"bytes":295,"dir":2,"interval":536}],"tls":{"version":"tls1.2","sni":"app.adjust.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51856,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1441,"s2c_bytes":159376,"c2s_pkts":5,"s2c_pkts":113,"total_pkts":118,"duration":30334,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":67},{"bytes":255,"dir":2,"interval":8},{"bytes":58,"dir":1,"interval":13},{"bytes":255,"dir":2,"interval":13},{"bytes":319,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":610,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30248}],"tls":{"version":"tls1.2","sni":"dtmall-tel.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49731,"dip":"182.254.56.82","dport":443,"proto":"tcp","c2s_bytes":7355,"s2c_bytes":5100,"c2s_pkts":9,"s2c_pkts":7,"total_pkts":16,"duration":78545,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1384,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":45,"dir":1,"interval":529},{"bytes":818,"dir":1,"interval":9},{"bytes":865,"dir":1,"interval":0},{"bytes":273,"dir":2,"interval":488},{"bytes":819,"dir":1,"interval":2908},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":6},{"bytes":1440,"dir":1,"interval":1},{"bytes":283,"dir":1,"interval":0},{"bytes":274,"dir":2,"interval":2869},{"bytes":31,"dir":2,"interval":75003}],"tls":{"version":"tls1.2","sni":"stat.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51902,"dip":"60.29.228.151","dport":443,"proto":"tcp","c2s_bytes":1000,"s2c_bytes":4460,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":1345,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":483,"dir":1,"interval":339},{"bytes":831,"dir":2,"interval":21},{"bytes":31,"dir":2,"interval":1000}],"tls":{"version":"tls1.2","sni":"v.admaster.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51859,"dip":"122.14.43.41","dport":443,"proto":"tcp","c2s_bytes":1050,"s2c_bytes":54233,"c2s_pkts":4,"s2c_pkts":40,"total_pkts":44,"duration":31134,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":138,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":685},{"bytes":376,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":90,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1203,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30445}],"tls":{"version":"tls1.2","sni":"zconfig.alibabausercontent.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51858,"dip":"106.11.68.19","dport":443,"proto":"tcp","c2s_bytes":822,"s2c_bytes":3752,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":31144,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":654,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":57},{"bytes":274,"dir":1,"interval":895},{"bytes":280,"dir":2,"interval":152},{"bytes":31,"dir":1,"interval":30230}],"tls":{"version":"tls1.2","sni":"apoll.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51868,"dip":"203.119.144.238","dport":443,"proto":"tcp","c2s_bytes":48551,"s2c_bytes":7646,"c2s_pkts":37,"s2c_pkts":8,"total_pkts":45,"duration":27133,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":283,"dir":2,"interval":2},{"bytes":274,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":200},{"bytes":46,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":657,"dir":1,"interval":13},{"bytes":1440,"dir":1,"interval":194},{"bytes":1440,"dir":1,"interval":17},{"bytes":1440,"dir":1,"interval":9},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":7},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":5},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":39},{"bytes":1440,"dir":1,"interval":9},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1220,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":26628}],"tls":{"version":"tls1.2","sni":"rhdc-acs.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51651,"dip":"182.254.58.161","dport":443,"proto":"tcp","c2s_bytes":1105,"s2c_bytes":5058,"c2s_pkts":10,"s2c_pkts":15,"total_pkts":25,"duration":180406,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":5,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":63},{"bytes":51,"dir":2,"interval":62},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":17},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":17},{"bytes":128,"dir":2,"interval":44},{"bytes":38,"dir":2,"interval":0},{"bytes":57,"dir":1,"interval":267},{"bytes":57,"dir":1,"interval":0},{"bytes":128,"dir":2,"interval":265},{"bytes":38,"dir":2,"interval":0},{"bytes":128,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179998},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180056}],"tls":{"version":"tls1.2","sni":"182.254.58.161","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51652,"dip":"113.96.208.169","dport":443,"proto":"tcp","c2s_bytes":1105,"s2c_bytes":5396,"c2s_pkts":10,"s2c_pkts":15,"total_pkts":25,"duration":180711,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":5,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":64},{"bytes":51,"dir":2,"interval":55},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":45},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":16},{"bytes":38,"dir":2,"interval":45},{"bytes":242,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":57,"dir":1,"interval":454},{"bytes":57,"dir":1,"interval":0},{"bytes":240,"dir":2,"interval":468},{"bytes":38,"dir":2,"interval":0},{"bytes":240,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":180006},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180130}],"tls":{"version":"tls1.2","sni":"113.96.208.169","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51866,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1450,"s2c_bytes":4828,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":30572,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":65},{"bytes":58,"dir":1,"interval":10},{"bytes":328,"dir":1,"interval":0},{"bytes":822,"dir":2,"interval":17},{"bytes":24,"dir":1,"interval":30495}],"tls":{"version":"tls1.2","sni":"wvcfg.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51666,"dip":"121.51.23.103","dport":443,"proto":"tcp","c2s_bytes":991,"s2c_bytes":4727,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":180125,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":5,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":76},{"bytes":51,"dir":2,"interval":73},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":54},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":6},{"bytes":38,"dir":2,"interval":53},{"bytes":167,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179943},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":179989}],"tls":{"version":"tls1.2","sni":"121.51.23.103","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51663,"dip":"121.51.23.103","dport":443,"proto":"tcp","c2s_bytes":1259,"s2c_bytes":6051,"c2s_pkts":9,"s2c_pkts":12,"total_pkts":21,"duration":180169,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":70},{"bytes":51,"dir":2,"interval":68},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":44},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":341,"dir":1,"interval":0},{"bytes":61,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":15},{"bytes":38,"dir":2,"interval":44},{"bytes":42,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":2},{"bytes":21,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179998},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180038}],"tls":{"version":"tls1.2","sni":"c.y.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51669,"dip":"58.251.116.196","dport":443,"proto":"tcp","c2s_bytes":991,"s2c_bytes":4727,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":180247,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":55},{"bytes":51,"dir":2,"interval":52},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":95},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":95},{"bytes":167,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179999},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180096}],"tls":{"version":"tls1.2","sni":"58.251.116.196","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51960,"dip":"124.163.211.132","dport":443,"proto":"tcp","c2s_bytes":2015,"s2c_bytes":259756,"c2s_pkts":13,"s2c_pkts":187,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":14},{"bytes":303,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":49,"dir":2,"interval":0},{"bytes":26,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":170},{"bytes":58,"dir":1,"interval":38},{"bytes":46,"dir":1,"interval":5},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":303,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":93,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":14},{"bytes":40,"dir":2,"interval":155},{"bytes":310,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":120,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cdn.cashslide.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51671,"dip":"58.251.82.211","dport":443,"proto":"tcp","c2s_bytes":991,"s2c_bytes":4727,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":180807,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":293},{"bytes":51,"dir":2,"interval":290},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":458},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":457},{"bytes":167,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179999},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180055}],"tls":{"version":"tls1.2","sni":"58.251.82.211","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51668,"dip":"157.255.173.172","dport":443,"proto":"tcp","c2s_bytes":1162,"s2c_bytes":5672,"c2s_pkts":11,"s2c_pkts":17,"total_pkts":28,"duration":181386,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":5,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":56},{"bytes":51,"dir":2,"interval":53},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":47},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":47},{"bytes":240,"dir":2,"interval":4},{"bytes":38,"dir":2,"interval":0},{"bytes":57,"dir":1,"interval":116},{"bytes":240,"dir":2,"interval":117},{"bytes":38,"dir":2,"interval":0},{"bytes":57,"dir":1,"interval":715},{"bytes":240,"dir":2,"interval":716},{"bytes":38,"dir":2,"interval":0},{"bytes":57,"dir":1,"interval":394},{"bytes":240,"dir":2,"interval":395},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179999},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180056}],"tls":{"version":"tls1.2","sni":"157.255.173.172","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51667,"dip":"220.194.95.139","dport":443,"proto":"tcp","c2s_bytes":1048,"s2c_bytes":4893,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":182012,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":39},{"bytes":51,"dir":2,"interval":37},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":66},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":66},{"bytes":167,"dir":2,"interval":0},{"bytes":57,"dir":1,"interval":1869},{"bytes":166,"dir":2,"interval":1869},{"bytes":46,"dir":2,"interval":180002},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180037}],"tls":{"version":"tls1.2","sni":"220.194.95.139","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51657,"dip":"210.22.247.162","dport":443,"proto":"tcp","c2s_bytes":1333,"s2c_bytes":5722,"c2s_pkts":14,"s2c_pkts":20,"total_pkts":34,"duration":182189,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":5,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":101},{"bytes":51,"dir":2,"interval":94},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":68},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":57,"dir":1,"interval":0},{"bytes":57,"dir":1,"interval":0},{"bytes":57,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":68},{"bytes":128,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":128,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":332,"dir":2,"interval":28},{"bytes":57,"dir":1,"interval":505},{"bytes":128,"dir":2,"interval":475},{"bytes":38,"dir":2,"interval":0},{"bytes":57,"dir":1,"interval":307},{"bytes":128,"dir":2,"interval":309},{"bytes":38,"dir":2,"interval":0},{"bytes":57,"dir":1,"interval":1163},{"bytes":128,"dir":2,"interval":1165},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":180000},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180043}],"tls":{"version":"tls1.2","sni":"210.22.247.162","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51672,"dip":"123.125.106.226","dport":443,"proto":"tcp","c2s_bytes":2001,"s2c_bytes":6172,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":181065,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1228,"dir":2,"interval":0},{"bytes":354,"dir":1,"interval":391},{"bytes":51,"dir":2,"interval":390},{"bytes":1054,"dir":1,"interval":224},{"bytes":73,"dir":2,"interval":223},{"bytes":409,"dir":2,"interval":310},{"bytes":45,"dir":1,"interval":440},{"bytes":31,"dir":2,"interval":180130},{"bytes":31,"dir":1,"interval":180009}],"tls":{"version":"tls1.2","sni":"api.weibo.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51670,"dip":"183.3.233.236","dport":443,"proto":"tcp","c2s_bytes":1048,"s2c_bytes":4893,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":180249,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":191},{"bytes":51,"dir":2,"interval":196},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":82},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":57,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":157,"dir":2,"interval":81},{"bytes":48,"dir":2,"interval":0},{"bytes":166,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179916},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":179976}],"tls":{"version":"tls1.2","sni":"183.3.233.236","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51674,"dip":"101.91.63.215","dport":443,"proto":"tcp","c2s_bytes":1048,"s2c_bytes":4893,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":180120,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":60},{"bytes":51,"dir":2,"interval":49},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":58},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":57,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":157,"dir":2,"interval":58},{"bytes":48,"dir":2,"interval":0},{"bytes":166,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":179942},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180000}],"tls":{"version":"tls1.2","sni":"101.91.63.215","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51964,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":4293,"s2c_bytes":242818,"c2s_pkts":6,"s2c_pkts":194,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":446,"dir":1,"interval":578},{"bytes":1460,"dir":2,"interval":130},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1272,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":313,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":876,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":627,"dir":2,"interval":0},{"bytes":1163,"dir":1,"interval":323},{"bytes":1460,"dir":2,"interval":216},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1310,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":208,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":21},{"bytes":596,"dir":1,"interval":0},{"bytes":119,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":77},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":138,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":687,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1367,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":299,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1074,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51677,"dip":"119.29.48.48","dport":443,"proto":"tcp","c2s_bytes":1359,"s2c_bytes":3885,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":180232,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":534,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":66},{"bytes":51,"dir":2,"interval":64},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":56},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":253,"dir":1,"interval":0},{"bytes":249,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":56},{"bytes":42,"dir":2,"interval":0},{"bytes":156,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":180001},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":180108}],"tls":{"version":"tls1.2","sni":"ten.sngapm.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51972,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":4628,"s2c_bytes":173583,"c2s_pkts":45,"s2c_pkts":155,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":379},{"bytes":53,"dir":1,"interval":20},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":299,"dir":1,"interval":0},{"bytes":83,"dir":1,"interval":0},{"bytes":88,"dir":1,"interval":1},{"bytes":90,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":346},{"bytes":1193,"dir":2,"interval":6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1064,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":89},{"bytes":87,"dir":1,"interval":89},{"bytes":89,"dir":1,"interval":2},{"bytes":1310,"dir":2,"interval":167},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":902,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":350,"dir":2,"interval":0},{"bytes":94,"dir":1,"interval":6},{"bytes":97,"dir":1,"interval":0},{"bytes":453,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":3},{"bytes":785,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":83,"dir":1,"interval":1902},{"bytes":1187,"dir":2,"interval":1899},{"bytes":94,"dir":1,"interval":2380},{"bytes":91,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":88,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":0},{"bytes":97,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":0},{"bytes":573,"dir":2,"interval":2380},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1016,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":89,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":95,"dir":1,"interval":7},{"bytes":599,"dir":2,"interval":0},{"bytes":569,"dir":2,"interval":0},{"bytes":383,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":191,"dir":2,"interval":0},{"bytes":1033,"dir":2,"interval":3},{"bytes":93,"dir":1,"interval":28},{"bytes":96,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":96,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":93,"dir":1,"interval":0},{"bytes":96,"dir":1,"interval":0},{"bytes":86,"dir":1,"interval":0},{"bytes":97,"dir":1,"interval":0},{"bytes":96,"dir":1,"interval":0},{"bytes":1188,"dir":2,"interval":28},{"bytes":1340,"dir":2,"interval":3},{"bytes":880,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":160,"dir":2,"interval":0},{"bytes":517,"dir":2,"interval":0},{"bytes":925,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":834,"dir":2,"interval":0},{"bytes":468,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":98,"dir":1,"interval":13},{"bytes":103,"dir":1,"interval":0},{"bytes":99,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":4},{"bytes":91,"dir":1,"interval":0},{"bytes":666,"dir":2,"interval":8},{"bytes":717,"dir":2,"interval":2},{"bytes":1081,"dir":2,"interval":0},{"bytes":971,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":890,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":73},{"bytes":97,"dir":1,"interval":0},{"bytes":97,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":71},{"bytes":78,"dir":2,"interval":0},{"bytes":1133,"dir":2,"interval":2},{"bytes":484,"dir":2,"interval":0},{"bytes":92,"dir":1,"interval":21},{"bytes":555,"dir":2,"interval":18},{"bytes":95,"dir":1,"interval":8}],"tls":{"version":"tls1.2","sni":"sm.bdimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51968,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":2167,"s2c_bytes":234153,"c2s_pkts":13,"s2c_pkts":187,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":628},{"bytes":53,"dir":1,"interval":5},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":782,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":19},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":990,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":157,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":107,"dir":1,"interval":1049},{"bytes":1340,"dir":2,"interval":1061},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":351,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":563,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":430},{"bytes":1340,"dir":2,"interval":420},{"bytes":478,"dir":2,"interval":0},{"bytes":86,"dir":1,"interval":3975},{"bytes":89,"dir":1,"interval":0},{"bytes":84,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":3974},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":815,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":264,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":261,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"imgsa.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51989,"dip":"182.61.200.107","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4224,"c2s_pkts":1,"s2c_pkts":10,"total_pkts":11,"duration":107,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":28}],"tls":{"version":"tls1.2","sni":"als.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51953,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1074,"s2c_bytes":5438,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":12213,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":111},{"bytes":431,"dir":1,"interval":2},{"bytes":526,"dir":2,"interval":41},{"bytes":1432,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api2.firefoxchina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51966,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":6295,"s2c_bytes":7113,"c2s_pkts":6,"s2c_pkts":13,"total_pkts":19,"duration":9336,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1188,"dir":1,"interval":568},{"bytes":864,"dir":2,"interval":46},{"bytes":1391,"dir":1,"interval":1075},{"bytes":741,"dir":2,"interval":1076},{"bytes":1389,"dir":1,"interval":19},{"bytes":865,"dir":2,"interval":19},{"bytes":1452,"dir":1,"interval":4435},{"bytes":358,"dir":1,"interval":0},{"bytes":378,"dir":2,"interval":4451}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51962,"dip":"124.163.207.47","dport":443,"proto":"tcp","c2s_bytes":1003,"s2c_bytes":71327,"c2s_pkts":2,"s2c_pkts":51,"total_pkts":53,"duration":11372,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1395,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":18},{"bytes":486,"dir":1,"interval":451},{"bytes":1448,"dir":2,"interval":136},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":170,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static.huohu123.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51881,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":2630,"s2c_bytes":162310,"c2s_pkts":20,"s2c_pkts":134,"total_pkts":154,"duration":18956,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1301,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":203},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":301,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":38},{"bytes":774,"dir":2,"interval":2},{"bytes":190,"dir":1,"interval":148},{"bytes":146,"dir":1,"interval":171},{"bytes":515,"dir":2,"interval":445},{"bytes":497,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":164},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":836,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1091,"dir":2,"interval":0},{"bytes":80,"dir":1,"interval":73},{"bytes":1460,"dir":2,"interval":70},{"bytes":1460,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":61},{"bytes":120,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":119,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":63},{"bytes":1113,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":521,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":220,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1058,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":177,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":26},{"bytes":87,"dir":1,"interval":0},{"bytes":86,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1105,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":53,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1339,"dir":2,"interval":0},{"bytes":915,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":301,"dir":2,"interval":0},{"bytes":116,"dir":1,"interval":1455},{"bytes":1460,"dir":2,"interval":1447},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":146,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mjs.sinaimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51977,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":2950,"s2c_bytes":102986,"c2s_pkts":16,"s2c_pkts":83,"total_pkts":99,"duration":7477,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2139},{"bytes":53,"dir":1,"interval":12},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":858,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":7},{"bytes":141,"dir":1,"interval":2},{"bytes":139,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":69},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1160,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":332,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":624,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":64}],"tls":{"version":"tls1.2","sni":"ss1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51944,"dip":"114.112.172.231","dport":443,"proto":"tcp","c2s_bytes":2668,"s2c_bytes":67253,"c2s_pkts":6,"s2c_pkts":54,"total_pkts":60,"duration":14291,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":299,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":179},{"bytes":388,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":78},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":135,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":425,"dir":1,"interval":50},{"bytes":1460,"dir":2,"interval":43},{"bytes":1460,"dir":2,"interval":0},{"bytes":1279,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":475,"dir":2,"interval":0},{"bytes":443,"dir":1,"interval":69},{"bytes":1460,"dir":2,"interval":543},{"bytes":1460,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1204,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":769,"dir":1,"interval":3708},{"bytes":556,"dir":2,"interval":3207},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mobile.firefoxchina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51940,"dip":"39.97.2.92","dport":443,"proto":"tcp","c2s_bytes":1355,"s2c_bytes":3992,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":16804,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":167,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":266},{"bytes":53,"dir":1,"interval":14},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":404,"dir":1,"interval":0},{"bytes":125,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":45},{"bytes":38,"dir":1,"interval":9},{"bytes":293,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":171,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"www.qchannel03.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51882,"dip":"123.126.45.71","dport":443,"proto":"tcp","c2s_bytes":4920,"s2c_bytes":9250,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":18652,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":865,"dir":1,"interval":98},{"bytes":655,"dir":2,"interval":43},{"bytes":625,"dir":1,"interval":332},{"bytes":655,"dir":2,"interval":332},{"bytes":1448,"dir":1,"interval":28},{"bytes":289,"dir":1,"interval":0},{"bytes":459,"dir":2,"interval":28},{"bytes":540,"dir":1,"interval":1042},{"bytes":653,"dir":2,"interval":1042},{"bytes":636,"dir":1,"interval":319},{"bytes":655,"dir":2,"interval":319}],"tls":{"version":"tls1.2","sni":"beacon.sina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51875,"dip":"122.14.43.172","dport":443,"proto":"tcp","c2s_bytes":1134,"s2c_bytes":67396,"c2s_pkts":4,"s2c_pkts":51,"total_pkts":55,"duration":30144,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":99},{"bytes":460,"dir":1,"interval":3},{"bytes":1341,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1153,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":445,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":427,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":21,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":852,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":760,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30036}],"tls":{"version":"tls1.2","sni":"market.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51880,"dip":"123.126.45.68","dport":443,"proto":"tcp","c2s_bytes":1677,"s2c_bytes":40462,"c2s_pkts":8,"s2c_pkts":35,"total_pkts":43,"duration":19735,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":117,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":73},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":419,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":27},{"bytes":1448,"dir":2,"interval":14},{"bytes":1134,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":69,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":536,"dir":2,"interval":0},{"bytes":402,"dir":1,"interval":3240},{"bytes":402,"dir":2,"interval":3224},{"bytes":156,"dir":1,"interval":372},{"bytes":191,"dir":2,"interval":381}],"tls":{"version":"tls1.2","sni":"sina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51947,"dip":"114.112.172.231","dport":443,"proto":"tcp","c2s_bytes":1052,"s2c_bytes":9272,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":14651,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":69},{"bytes":409,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1279,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mobile.firefoxchina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51965,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":4468,"s2c_bytes":66714,"c2s_pkts":4,"s2c_pkts":58,"total_pkts":62,"duration":9960,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1169,"dir":1,"interval":576},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":1390,"dir":1,"interval":1083},{"bytes":1460,"dir":2,"interval":1081},{"bytes":1449,"dir":2,"interval":0},{"bytes":1392,"dir":1,"interval":37},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":268,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51951,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1077,"s2c_bytes":5721,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":13057,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":299,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":183},{"bytes":434,"dir":1,"interval":5},{"bytes":526,"dir":2,"interval":61},{"bytes":1460,"dir":2,"interval":0},{"bytes":224,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api2.firefoxchina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51933,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":7590,"s2c_bytes":7488,"c2s_pkts":8,"s2c_pkts":11,"total_pkts":19,"duration":17721,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":1283,"dir":1,"interval":148},{"bytes":264,"dir":2,"interval":58},{"bytes":1329,"dir":1,"interval":42},{"bytes":264,"dir":2,"interval":42},{"bytes":1329,"dir":1,"interval":6},{"bytes":264,"dir":2,"interval":6},{"bytes":1448,"dir":1,"interval":12},{"bytes":118,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":13},{"bytes":1448,"dir":1,"interval":15},{"bytes":118,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":15}],"tls":{"version":"tls1.2","sni":"mixern.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51987,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":7581,"s2c_bytes":4858,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":3310,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":212},{"bytes":354,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":38},{"bytes":1452,"dir":1,"interval":351},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":902,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":350}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51988,"dip":"182.61.200.7","dport":443,"proto":"tcp","c2s_bytes":2456,"s2c_bytes":4492,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":2795,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":132},{"bytes":487,"dir":1,"interval":0},{"bytes":212,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"sp0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51952,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":982,"s2c_bytes":5075,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":13033,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":6},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":31},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":465,"dir":1,"interval":476},{"bytes":882,"dir":2,"interval":136}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51937,"dip":"123.126.45.71","dport":443,"proto":"tcp","c2s_bytes":1152,"s2c_bytes":6813,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":17434,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":635,"dir":1,"interval":158},{"bytes":655,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"beacon.sina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51938,"dip":"123.59.190.225","dport":443,"proto":"tcp","c2s_bytes":958,"s2c_bytes":6301,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":17431,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1093,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":6},{"bytes":51,"dir":2,"interval":13},{"bytes":441,"dir":1,"interval":299},{"bytes":1460,"dir":2,"interval":182},{"bytes":435,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.leju.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51903,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":1513,"s2c_bytes":33362,"c2s_pkts":2,"s2c_pkts":25,"total_pkts":27,"duration":18750,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":996,"dir":1,"interval":60},{"bytes":1448,"dir":2,"interval":50},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1140,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sa.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51883,"dip":"123.126.45.75","dport":443,"proto":"tcp","c2s_bytes":2530,"s2c_bytes":9802,"c2s_pkts":15,"s2c_pkts":17,"total_pkts":32,"duration":19079,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":117,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":86},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":262,"dir":1,"interval":0},{"bytes":71,"dir":1,"interval":0},{"bytes":367,"dir":1,"interval":0},{"bytes":124,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":24},{"bytes":55,"dir":2,"interval":2},{"bytes":670,"dir":2,"interval":1},{"bytes":694,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":22},{"bytes":200,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":19},{"bytes":553,"dir":2,"interval":2},{"bytes":69,"dir":1,"interval":81},{"bytes":235,"dir":1,"interval":0},{"bytes":71,"dir":1,"interval":0},{"bytes":367,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":78},{"bytes":42,"dir":2,"interval":4},{"bytes":737,"dir":2,"interval":0},{"bytes":693,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gk.sina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51885,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":2463,"s2c_bytes":24338,"c2s_pkts":3,"s2c_pkts":20,"total_pkts":23,"duration":19042,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":992,"dir":1,"interval":71},{"bytes":1448,"dir":2,"interval":21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":156,"dir":2,"interval":0},{"bytes":954,"dir":1,"interval":155},{"bytes":1448,"dir":2,"interval":172},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":633,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sa.sina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51971,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":1156,"s2c_bytes":21202,"c2s_pkts":8,"s2c_pkts":24,"total_pkts":32,"duration":9408,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":817},{"bytes":53,"dir":1,"interval":10},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":258,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":252},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":104,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":72,"dir":1,"interval":276},{"bytes":1334,"dir":2,"interval":273},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":169,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51967,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":4468,"s2c_bytes":13035,"c2s_pkts":4,"s2c_pkts":17,"total_pkts":21,"duration":9959,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1174,"dir":1,"interval":570},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":0},{"bytes":379,"dir":2,"interval":0},{"bytes":1389,"dir":1,"interval":1080},{"bytes":1460,"dir":2,"interval":1080},{"bytes":794,"dir":2,"interval":0},{"bytes":1388,"dir":1,"interval":40},{"bytes":1460,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":297,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51970,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":8487,"s2c_bytes":66743,"c2s_pkts":10,"s2c_pkts":66,"total_pkts":76,"duration":9417,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":827},{"bytes":215,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":291},{"bytes":1460,"dir":2,"interval":0},{"bytes":594,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":146},{"bytes":299,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":342},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":268,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1240,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1317,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":506,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":742,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":498,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":703,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1372,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1610},{"bytes":354,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1690},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1251,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1404,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":54,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":331},{"bytes":596,"dir":1,"interval":0},{"bytes":698,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":360},{"bytes":1460,"dir":2,"interval":0},{"bytes":157,"dir":2,"interval":0},{"bytes":1190,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1054,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"feed.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51939,"dip":"123.126.45.36","dport":443,"proto":"tcp","c2s_bytes":1220,"s2c_bytes":6751,"c2s_pkts":6,"s2c_pkts":10,"total_pkts":16,"duration":17432,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":117,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":133},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":520,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":28},{"bytes":439,"dir":2,"interval":9},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":13}],"tls":{"version":"tls1.2","sni":"interface.sina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51969,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":40786,"s2c_bytes":7806,"c2s_pkts":35,"s2c_pkts":20,"total_pkts":55,"duration":9950,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":90},{"bytes":267,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":23},{"bytes":1269,"dir":1,"interval":2411},{"bytes":213,"dir":2,"interval":2445},{"bytes":1452,"dir":1,"interval":151},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1155,"dir":1,"interval":1},{"bytes":340,"dir":2,"interval":121},{"bytes":1452,"dir":1,"interval":466},{"bytes":469,"dir":1,"interval":1},{"bytes":340,"dir":2,"interval":463},{"bytes":1452,"dir":1,"interval":94},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":340,"dir":1,"interval":4},{"bytes":340,"dir":2,"interval":214},{"bytes":1452,"dir":1,"interval":161},{"bytes":305,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":86},{"bytes":1452,"dir":1,"interval":77},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":625,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":61},{"bytes":1452,"dir":1,"interval":669},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":18},{"bytes":446,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":718},{"bytes":1452,"dir":1,"interval":2481},{"bytes":332,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":2438},{"bytes":1452,"dir":1,"interval":504},{"bytes":366,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":489},{"bytes":1452,"dir":1,"interval":35},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1299,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51957,"dip":"124.163.207.47","dport":443,"proto":"tcp","c2s_bytes":1089,"s2c_bytes":11916,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":12768,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":20},{"bytes":572,"dir":1,"interval":349},{"bytes":1448,"dir":2,"interval":172},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1165,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static.firefoxchina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51948,"dip":"124.163.207.47","dport":443,"proto":"tcp","c2s_bytes":5712,"s2c_bytes":201490,"c2s_pkts":10,"s2c_pkts":147,"total_pkts":157,"duration":14650,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":18},{"bytes":479,"dir":1,"interval":163},{"bytes":1448,"dir":2,"interval":42},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":804,"dir":2,"interval":0},{"bytes":592,"dir":1,"interval":1043},{"bytes":1448,"dir":2,"interval":1043},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1135,"dir":2,"interval":0},{"bytes":592,"dir":1,"interval":637},{"bytes":1448,"dir":2,"interval":600},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":642,"dir":2,"interval":0},{"bytes":592,"dir":1,"interval":37},{"bytes":1448,"dir":2,"interval":36},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":572,"dir":1,"interval":29},{"bytes":1448,"dir":2,"interval":29},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1334,"dir":2,"interval":0},{"bytes":592,"dir":1,"interval":26},{"bytes":1448,"dir":2,"interval":26},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":689,"dir":2,"interval":0},{"bytes":592,"dir":1,"interval":76},{"bytes":1448,"dir":2,"interval":75},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":624,"dir":2,"interval":0},{"bytes":592,"dir":1,"interval":47},{"bytes":1448,"dir":2,"interval":46},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":195,"dir":2,"interval":0},{"bytes":592,"dir":1,"interval":130},{"bytes":1043,"dir":2,"interval":129}],"tls":{"version":"tls1.2","sni":"static.firefoxchina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51963,"dip":"124.163.207.47","dport":443,"proto":"tcp","c2s_bytes":1003,"s2c_bytes":36992,"c2s_pkts":2,"s2c_pkts":28,"total_pkts":30,"duration":12001,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1395,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":16},{"bytes":486,"dir":1,"interval":450},{"bytes":1448,"dir":2,"interval":136},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":1}],"tls":{"version":"tls1.2","sni":"static.huohu123.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51887,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":2510,"s2c_bytes":38015,"c2s_pkts":3,"s2c_pkts":29,"total_pkts":32,"duration":18958,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":993,"dir":1,"interval":134},{"bytes":1448,"dir":2,"interval":65},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":285,"dir":2,"interval":0},{"bytes":1000,"dir":1,"interval":12},{"bytes":1448,"dir":2,"interval":24},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1164,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sa.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51976,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":3505,"s2c_bytes":176334,"c2s_pkts":20,"s2c_pkts":148,"total_pkts":168,"duration":8106,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2127},{"bytes":53,"dir":1,"interval":9},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":857,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":1},{"bytes":140,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":44},{"bytes":140,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1120,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":400,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":979,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1121,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":186,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":947,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1324,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":98,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1069,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":786,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":901,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":2},{"bytes":1121,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":186,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1249,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":528,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":528,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":-6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":-9},{"bytes":400,"dir":2,"interval":9},{"bytes":1340,"dir":2,"interval":-9},{"bytes":1340,"dir":2,"interval":9},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":926,"dir":2,"interval":0},{"bytes":1083,"dir":2,"interval":-10}],"tls":{"version":"tls1.2","sni":"ss0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51959,"dip":"218.26.75.210","dport":443,"proto":"tcp","c2s_bytes":1181,"s2c_bytes":6576,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":12369,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":15},{"bytes":126,"dir":1,"interval":233},{"bytes":538,"dir":1,"interval":10},{"bytes":406,"dir":2,"interval":159},{"bytes":754,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ext.zuimeitianqi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51955,"dip":"124.163.207.47","dport":443,"proto":"tcp","c2s_bytes":1109,"s2c_bytes":10263,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":12772,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":16},{"bytes":592,"dir":1,"interval":312},{"bytes":1448,"dir":2,"interval":143},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static.firefoxchina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51946,"dip":"114.112.172.231","dport":443,"proto":"tcp","c2s_bytes":1053,"s2c_bytes":9654,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":14659,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":85},{"bytes":410,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":0},{"bytes":1279,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mobile.firefoxchina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51950,"dip":"182.61.200.166","dport":443,"proto":"tcp","c2s_bytes":3998,"s2c_bytes":32985,"c2s_pkts":5,"s2c_pkts":34,"total_pkts":39,"duration":14635,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":398,"dir":1,"interval":99},{"bytes":1460,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":178,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1354,"dir":2,"interval":0},{"bytes":606,"dir":1,"interval":71},{"bytes":528,"dir":2,"interval":70},{"bytes":1096,"dir":1,"interval":6052},{"bytes":1460,"dir":2,"interval":6052},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1162,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":1381,"dir":1,"interval":103},{"bytes":328,"dir":2,"interval":103}],"tls":{"version":"tls1.2","sni":"hm.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51932,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":29173,"s2c_bytes":11167,"c2s_pkts":32,"s2c_pkts":25,"total_pkts":57,"duration":17918,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":1448,"dir":1,"interval":106},{"bytes":468,"dir":1,"interval":0},{"bytes":265,"dir":2,"interval":37},{"bytes":1448,"dir":1,"interval":61},{"bytes":69,"dir":1,"interval":0},{"bytes":195,"dir":2,"interval":62},{"bytes":1287,"dir":1,"interval":33},{"bytes":264,"dir":2,"interval":32},{"bytes":1448,"dir":1,"interval":6},{"bytes":114,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":7},{"bytes":1283,"dir":1,"interval":11},{"bytes":264,"dir":2,"interval":11},{"bytes":1448,"dir":1,"interval":7},{"bytes":114,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":7},{"bytes":1283,"dir":1,"interval":18},{"bytes":264,"dir":2,"interval":17},{"bytes":1448,"dir":1,"interval":15},{"bytes":586,"dir":1,"interval":0},{"bytes":265,"dir":2,"interval":15},{"bytes":1289,"dir":1,"interval":7},{"bytes":264,"dir":2,"interval":7},{"bytes":1448,"dir":1,"interval":6},{"bytes":112,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":7},{"bytes":1329,"dir":1,"interval":6},{"bytes":264,"dir":2,"interval":5},{"bytes":1448,"dir":1,"interval":16},{"bytes":104,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":17},{"bytes":1329,"dir":1,"interval":10},{"bytes":264,"dir":2,"interval":9},{"bytes":1448,"dir":1,"interval":28},{"bytes":116,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":29},{"bytes":1448,"dir":1,"interval":42},{"bytes":116,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":42},{"bytes":1448,"dir":1,"interval":7},{"bytes":116,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":6},{"bytes":1329,"dir":1,"interval":12},{"bytes":264,"dir":2,"interval":12},{"bytes":1448,"dir":1,"interval":9},{"bytes":118,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":9},{"bytes":1448,"dir":1,"interval":23},{"bytes":118,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":23}],"tls":{"version":"tls1.2","sni":"mixern.sina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51942,"dip":"221.228.208.94","dport":443,"proto":"tcp","c2s_bytes":1092,"s2c_bytes":5286,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":16374,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":28},{"bytes":242,"dir":2,"interval":29},{"bytes":575,"dir":1,"interval":263},{"bytes":531,"dir":2,"interval":59}],"tls":{"version":"tls1.2","sni":"cms.gtags.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51975,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":3365,"s2c_bytes":157666,"c2s_pkts":19,"s2c_pkts":124,"total_pkts":143,"duration":8109,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2129},{"bytes":53,"dir":1,"interval":10},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":857,"dir":1,"interval":1},{"bytes":140,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":45},{"bytes":38,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1133,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":705,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1281,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1207,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1281,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":-5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":209,"dir":2,"interval":58}],"tls":{"version":"tls1.2","sni":"ss2.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51978,"dip":"182.61.128.195","dport":443,"proto":"tcp","c2s_bytes":1276,"s2c_bytes":10983,"c2s_pkts":7,"s2c_pkts":13,"total_pkts":20,"duration":8105,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":428},{"bytes":53,"dir":1,"interval":24},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":450,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":61},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1173,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51884,"dip":"123.126.45.85","dport":443,"proto":"tcp","c2s_bytes":1625,"s2c_bytes":15676,"c2s_pkts":2,"s2c_pkts":13,"total_pkts":15,"duration":19079,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1108,"dir":1,"interval":81},{"bytes":1448,"dir":2,"interval":61},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":815,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cre.dp.sina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51934,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":4972,"s2c_bytes":6960,"c2s_pkts":6,"s2c_pkts":9,"total_pkts":15,"duration":17724,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1448,"dir":1,"interval":189},{"bytes":114,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":44},{"bytes":1448,"dir":1,"interval":14},{"bytes":116,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":14},{"bytes":1329,"dir":1,"interval":16},{"bytes":264,"dir":2,"interval":16}],"tls":{"version":"tls1.2","sni":"mixern.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51958,"dip":"124.163.207.47","dport":443,"proto":"tcp","c2s_bytes":1003,"s2c_bytes":58873,"c2s_pkts":2,"s2c_pkts":42,"total_pkts":44,"duration":12423,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":486,"dir":1,"interval":331},{"bytes":1448,"dir":2,"interval":161},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":733,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static.huohu123.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51980,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":2943,"s2c_bytes":12092,"c2s_pkts":4,"s2c_pkts":17,"total_pkts":21,"duration":6551,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":670},{"bytes":596,"dir":1,"interval":0},{"bytes":378,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":397},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":267,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":577,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"feed.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51936,"dip":"123.126.45.71","dport":443,"proto":"tcp","c2s_bytes":1157,"s2c_bytes":6813,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":17443,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":640,"dir":1,"interval":159},{"bytes":655,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"beacon.sina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51949,"dip":"182.61.128.194","dport":443,"proto":"tcp","c2s_bytes":1696,"s2c_bytes":42890,"c2s_pkts":12,"s2c_pkts":41,"total_pkts":53,"duration":14652,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":82},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":277,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":28},{"bytes":608,"dir":2,"interval":3},{"bytes":145,"dir":1,"interval":6151},{"bytes":1340,"dir":2,"interval":6152},{"bytes":1079,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":141,"dir":1,"interval":290},{"bytes":104,"dir":1,"interval":3},{"bytes":1195,"dir":2,"interval":288},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":424,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":276},{"bytes":1340,"dir":2,"interval":276},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1259,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":3975},{"bytes":1306,"dir":2,"interval":3974}],"tls":{"version":"tls1.2","sni":"gss3.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51961,"dip":"124.163.207.47","dport":443,"proto":"tcp","c2s_bytes":1003,"s2c_bytes":61884,"c2s_pkts":2,"s2c_pkts":44,"total_pkts":46,"duration":12003,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1395,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":486,"dir":1,"interval":439},{"bytes":1448,"dir":2,"interval":126},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":863,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static.huohu123.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51956,"dip":"124.163.207.47","dport":443,"proto":"tcp","c2s_bytes":1109,"s2c_bytes":7835,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":12775,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":16},{"bytes":592,"dir":1,"interval":350},{"bytes":1448,"dir":2,"interval":181},{"bytes":1448,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static.firefoxchina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51935,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":7116,"s2c_bytes":7478,"c2s_pkts":6,"s2c_pkts":11,"total_pkts":17,"duration":17717,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":1283,"dir":1,"interval":182},{"bytes":264,"dir":2,"interval":26},{"bytes":1329,"dir":1,"interval":5},{"bytes":264,"dir":2,"interval":5},{"bytes":1329,"dir":1,"interval":8},{"bytes":264,"dir":2,"interval":8},{"bytes":1329,"dir":1,"interval":9},{"bytes":264,"dir":2,"interval":9},{"bytes":1329,"dir":1,"interval":22},{"bytes":264,"dir":2,"interval":23}],"tls":{"version":"tls1.2","sni":"mixern.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51945,"dip":"114.112.172.231","dport":443,"proto":"tcp","c2s_bytes":1041,"s2c_bytes":22632,"c2s_pkts":3,"s2c_pkts":20,"total_pkts":23,"duration":14661,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":78},{"bytes":398,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":1026},{"bytes":1460,"dir":2,"interval":0},{"bytes":25,"dir":2,"interval":0},{"bytes":1283,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1213,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1204,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1213,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1074,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mobile.firefoxchina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51954,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1084,"s2c_bytes":58239,"c2s_pkts":3,"s2c_pkts":48,"total_pkts":51,"duration":12845,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":112},{"bytes":441,"dir":1,"interval":2},{"bytes":527,"dir":2,"interval":57},{"bytes":1054,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":423,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":639,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":886,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":56,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api2.firefoxchina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51871,"dip":"203.119.144.238","dport":443,"proto":"tcp","c2s_bytes":10004,"s2c_bytes":8281,"c2s_pkts":11,"s2c_pkts":9,"total_pkts":20,"duration":34429,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":29},{"bytes":1460,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":1440,"dir":1,"interval":416},{"bytes":368,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":7},{"bytes":593,"dir":1,"interval":0},{"bytes":361,"dir":2,"interval":65},{"bytes":1440,"dir":1,"interval":3281},{"bytes":43,"dir":1,"interval":0},{"bytes":1252,"dir":1,"interval":0},{"bytes":360,"dir":2,"interval":3287},{"bytes":31,"dir":1,"interval":30718}],"tls":{"version":"tls1.2","sni":"rhdc-acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51870,"dip":"203.119.144.238","dport":443,"proto":"tcp","c2s_bytes":123714,"s2c_bytes":8280,"c2s_pkts":91,"s2c_pkts":9,"total_pkts":100,"duration":34430,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":269,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":8},{"bytes":1440,"dir":1,"interval":407},{"bytes":36,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":7},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":4},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":354,"dir":1,"interval":0},{"bytes":361,"dir":2,"interval":136},{"bytes":1440,"dir":1,"interval":3259},{"bytes":29,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":347,"dir":1,"interval":0},{"bytes":360,"dir":2,"interval":3216},{"bytes":31,"dir":1,"interval":30720}],"tls":{"version":"tls1.2","sni":"rhdc-acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51865,"dip":"106.11.250.27","dport":443,"proto":"tcp","c2s_bytes":3026,"s2c_bytes":3817,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":47396,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":295,"dir":2,"interval":2},{"bytes":274,"dir":2,"interval":24},{"bytes":399,"dir":1,"interval":457},{"bytes":394,"dir":1,"interval":0},{"bytes":164,"dir":2,"interval":179},{"bytes":400,"dir":1,"interval":16617},{"bytes":1285,"dir":1,"interval":0},{"bytes":164,"dir":2,"interval":16607},{"bytes":31,"dir":1,"interval":30311}],"tls":{"version":"tls1.2","sni":"h-adashx.ut.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51995,"dip":"60.29.228.151","dport":443,"proto":"tcp","c2s_bytes":1000,"s2c_bytes":4460,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":1342,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":483,"dir":1,"interval":336},{"bytes":831,"dir":2,"interval":22},{"bytes":31,"dir":2,"interval":999}],"tls":{"version":"tls1.2","sni":"v.admaster.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52002,"dip":"60.29.228.151","dport":443,"proto":"tcp","c2s_bytes":1000,"s2c_bytes":4445,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":1338,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":413,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":483,"dir":1,"interval":331},{"bytes":831,"dir":2,"interval":27},{"bytes":31,"dir":2,"interval":1000}],"tls":{"version":"tls1.2","sni":"v.admaster.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51994,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":1509,"s2c_bytes":14738,"c2s_pkts":2,"s2c_pkts":12,"total_pkts":14,"duration":1746,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":992,"dir":1,"interval":95},{"bytes":1448,"dir":2,"interval":31},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sa.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51997,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1154,"s2c_bytes":60582,"c2s_pkts":8,"s2c_pkts":45,"total_pkts":53,"duration":1728,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1301,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":172},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":286,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":532,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":54}],"tls":{"version":"tls1.2","sni":"s3.pfp.sina.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51993,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":1449,"s2c_bytes":13377,"c2s_pkts":2,"s2c_pkts":11,"total_pkts":13,"duration":1747,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":932,"dir":1,"interval":105},{"bytes":1448,"dir":2,"interval":46},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1427,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sa.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51991,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":3435,"s2c_bytes":21922,"c2s_pkts":4,"s2c_pkts":18,"total_pkts":22,"duration":1845,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":992,"dir":1,"interval":83},{"bytes":1448,"dir":2,"interval":22},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1248,"dir":2,"interval":0},{"bytes":995,"dir":1,"interval":19},{"bytes":544,"dir":2,"interval":13},{"bytes":931,"dir":1,"interval":9},{"bytes":1448,"dir":2,"interval":22},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":925,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sa.sina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51990,"dip":"123.126.45.71","dport":443,"proto":"tcp","c2s_bytes":1388,"s2c_bytes":6828,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":1847,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":871,"dir":1,"interval":121},{"bytes":655,"dir":2,"interval":28}],"tls":{"version":"tls1.2","sni":"beacon.sina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52001,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":1806,"s2c_bytes":6422,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":1588,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1289,"dir":1,"interval":65},{"bytes":264,"dir":2,"interval":19}],"tls":{"version":"tls1.2","sni":"mixern.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52000,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":2521,"s2c_bytes":6423,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":1588,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":1448,"dir":1,"interval":63},{"bytes":556,"dir":1,"interval":0},{"bytes":265,"dir":2,"interval":19}],"tls":{"version":"tls1.2","sni":"mixern.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51996,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":14717,"s2c_bytes":8562,"c2s_pkts":15,"s2c_pkts":15,"total_pkts":30,"duration":1732,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":1448,"dir":1,"interval":91},{"bytes":450,"dir":1,"interval":0},{"bytes":265,"dir":2,"interval":21},{"bytes":1448,"dir":1,"interval":12},{"bytes":112,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":13},{"bytes":1329,"dir":1,"interval":50},{"bytes":264,"dir":2,"interval":48},{"bytes":1448,"dir":1,"interval":19},{"bytes":468,"dir":1,"interval":0},{"bytes":265,"dir":2,"interval":20},{"bytes":1283,"dir":1,"interval":9},{"bytes":264,"dir":2,"interval":8},{"bytes":1448,"dir":1,"interval":11},{"bytes":584,"dir":1,"interval":0},{"bytes":265,"dir":2,"interval":13},{"bytes":1289,"dir":1,"interval":7},{"bytes":264,"dir":2,"interval":5},{"bytes":1448,"dir":1,"interval":7},{"bytes":116,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":7},{"bytes":1329,"dir":1,"interval":30},{"bytes":264,"dir":2,"interval":29}],"tls":{"version":"tls1.2","sni":"mixern.sina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51999,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":1800,"s2c_bytes":6422,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":1742,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":1283,"dir":1,"interval":93},{"bytes":264,"dir":2,"interval":47}],"tls":{"version":"tls1.2","sni":"mixern.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51998,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1115,"s2c_bytes":36032,"c2s_pkts":7,"s2c_pkts":28,"total_pkts":35,"duration":1880,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1301,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":200},{"bytes":53,"dir":1,"interval":30},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":289,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":43},{"bytes":38,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"d5.sinaimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51992,"dip":"123.126.45.26","dport":443,"proto":"tcp","c2s_bytes":1510,"s2c_bytes":6702,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":1902,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":993,"dir":1,"interval":106},{"bytes":544,"dir":2,"interval":46}],"tls":{"version":"tls1.2","sni":"sa.sina.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51877,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1452,"s2c_bytes":32790,"c2s_pkts":5,"s2c_pkts":26,"total_pkts":31,"duration":30508,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":159},{"bytes":58,"dir":1,"interval":35},{"bytes":330,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":52},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":698,"dir":2,"interval":1},{"bytes":24,"dir":1,"interval":30311}],"tls":{"version":"tls1.2","sni":"ppp.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51876,"dip":"106.11.250.27","dport":443,"proto":"tcp","c2s_bytes":4855,"s2c_bytes":3669,"c2s_pkts":7,"s2c_pkts":6,"total_pkts":13,"duration":31406,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":25},{"bytes":400,"dir":1,"interval":239},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":407,"dir":1,"interval":0},{"bytes":164,"dir":2,"interval":105},{"bytes":31,"dir":1,"interval":31141},{"bytes":31,"dir":2,"interval":31115}],"tls":{"version":"tls1.2","sni":"h-adashx.ut.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51812,"dip":"103.107.217.162","dport":443,"proto":"tcp","c2s_bytes":3061,"s2c_bytes":10530,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":79376,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":743,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":22},{"bytes":126,"dir":1,"interval":514},{"bytes":695,"dir":1,"interval":63},{"bytes":699,"dir":1,"interval":0},{"bytes":315,"dir":2,"interval":383},{"bytes":719,"dir":1,"interval":4211},{"bytes":274,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":4368},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":486,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31248}],"tls":{"version":"tls1.2","sni":"apinew.gifshow.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49828,"dip":"183.201.224.52","dport":443,"proto":"tcp","c2s_bytes":765,"s2c_bytes":18002,"c2s_pkts":2,"s2c_pkts":15,"total_pkts":17,"duration":60210,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":19},{"bytes":242,"dir":2,"interval":20},{"bytes":592,"dir":1,"interval":189},{"bytes":473,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1155,"dir":2,"interval":18}],"tls":{"version":"tls1.2","sni":"dldir1.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":51886,"dip":"203.119.169.57","dport":443,"proto":"tcp","c2s_bytes":1055,"s2c_bytes":8132,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":30713,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":126,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":507,"dir":1,"interval":199},{"bytes":448,"dir":2,"interval":52},{"bytes":31,"dir":1,"interval":30507}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52015,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":4727,"s2c_bytes":207959,"c2s_pkts":41,"s2c_pkts":159,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":3},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":74},{"bytes":58,"dir":1,"interval":8},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":297,"dir":1,"interval":0},{"bytes":89,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":20},{"bytes":31,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":5},{"bytes":414,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1203,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":555,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":492,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":94,"dir":1,"interval":1344},{"bytes":97,"dir":1,"interval":0},{"bytes":93,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1344},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":734,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":237,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":17},{"bytes":93,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":88,"dir":1,"interval":0},{"bytes":89,"dir":1,"interval":0},{"bytes":110,"dir":1,"interval":0},{"bytes":107,"dir":1,"interval":0},{"bytes":110,"dir":1,"interval":0},{"bytes":109,"dir":1,"interval":0},{"bytes":110,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":696,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":2},{"bytes":92,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":1},{"bytes":96,"dir":1,"interval":1},{"bytes":93,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":0},{"bytes":93,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1017,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1161,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51986,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":1052,"s2c_bytes":10606,"c2s_pkts":7,"s2c_pkts":15,"total_pkts":22,"duration":20146,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":129},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":226,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":20},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":719,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":19999},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sm.bdimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52004,"dip":"182.61.200.166","dport":443,"proto":"tcp","c2s_bytes":5691,"s2c_bytes":18829,"c2s_pkts":5,"s2c_pkts":23,"total_pkts":28,"duration":13595,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":51,"dir":2,"interval":0},{"bytes":1207,"dir":1,"interval":94},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":0},{"bytes":29,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":894,"dir":2,"interval":2},{"bytes":1380,"dir":1,"interval":83},{"bytes":328,"dir":2,"interval":79},{"bytes":1207,"dir":1,"interval":3209},{"bytes":237,"dir":2,"interval":3349},{"bytes":1380,"dir":1,"interval":167},{"bytes":328,"dir":2,"interval":58},{"bytes":31,"dir":2,"interval":10000}],"tls":{"version":"tls1.2","sni":"hm.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52010,"dip":"114.112.172.231","dport":443,"proto":"tcp","c2s_bytes":1337,"s2c_bytes":4066,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":7865,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":299,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":94},{"bytes":694,"dir":1,"interval":5},{"bytes":555,"dir":2,"interval":33},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mobile.firefoxchina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52007,"dip":"124.163.211.132","dport":443,"proto":"tcp","c2s_bytes":3228,"s2c_bytes":4780,"c2s_pkts":19,"s2c_pkts":22,"total_pkts":41,"duration":14888,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":93},{"bytes":303,"dir":2,"interval":12},{"bytes":303,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":49,"dir":2,"interval":0},{"bytes":26,"dir":2,"interval":0},{"bytes":58,"dir":1,"interval":21},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":358,"dir":1,"interval":0},{"bytes":146,"dir":1,"interval":0},{"bytes":148,"dir":1,"interval":0},{"bytes":148,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":146,"dir":1,"interval":2},{"bytes":31,"dir":2,"interval":23},{"bytes":31,"dir":1,"interval":17},{"bytes":31,"dir":2,"interval":15},{"bytes":118,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":74,"dir":2,"interval":0},{"bytes":146,"dir":2,"interval":0},{"bytes":64,"dir":2,"interval":0},{"bytes":147,"dir":1,"interval":3242},{"bytes":148,"dir":1,"interval":0},{"bytes":146,"dir":1,"interval":0},{"bytes":148,"dir":1,"interval":0},{"bytes":146,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":3248},{"bytes":59,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":13},{"bytes":45,"dir":2,"interval":0},{"bytes":90,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":36,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cdn.cashslide.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52008,"dip":"218.26.75.210","dport":443,"proto":"tcp","c2s_bytes":1719,"s2c_bytes":7770,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":14473,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":15},{"bytes":126,"dir":1,"interval":131},{"bytes":538,"dir":1,"interval":5},{"bytes":406,"dir":2,"interval":87},{"bytes":754,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":538,"dir":1,"interval":2758},{"bytes":406,"dir":2,"interval":2739},{"bytes":754,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ext.zuimeitianqi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52021,"dip":"106.11.250.218","dport":443,"proto":"tcp","c2s_bytes":4779,"s2c_bytes":6384,"c2s_pkts":20,"s2c_pkts":21,"total_pkts":41,"duration":6692,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":25},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":229},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":220,"dir":1,"interval":0},{"bytes":96,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":4},{"bytes":38,"dir":2,"interval":49},{"bytes":343,"dir":2,"interval":25},{"bytes":249,"dir":2,"interval":0},{"bytes":255,"dir":1,"interval":68},{"bytes":380,"dir":2,"interval":47},{"bytes":577,"dir":1,"interval":30},{"bytes":225,"dir":1,"interval":21},{"bytes":305,"dir":1,"interval":0},{"bytes":263,"dir":2,"interval":37},{"bytes":135,"dir":2,"interval":24},{"bytes":135,"dir":2,"interval":0},{"bytes":329,"dir":1,"interval":971},{"bytes":372,"dir":1,"interval":5},{"bytes":158,"dir":2,"interval":961},{"bytes":204,"dir":1,"interval":39},{"bytes":135,"dir":2,"interval":24},{"bytes":130,"dir":1,"interval":192},{"bytes":135,"dir":2,"interval":283},{"bytes":135,"dir":2,"interval":-27},{"bytes":135,"dir":1,"interval":2142},{"bytes":158,"dir":2,"interval":2099},{"bytes":210,"dir":1,"interval":489},{"bytes":158,"dir":2,"interval":489},{"bytes":358,"dir":1,"interval":159},{"bytes":135,"dir":2,"interval":160},{"bytes":294,"dir":1,"interval":128},{"bytes":135,"dir":2,"interval":128},{"bytes":369,"dir":1,"interval":2052},{"bytes":158,"dir":2,"interval":2052}],"tls":{"version":"tls1.2","sni":"log.mmstat.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52027,"dip":"203.119.169.241","dport":443,"proto":"tcp","c2s_bytes":2359,"s2c_bytes":6341,"c2s_pkts":9,"s2c_pkts":12,"total_pkts":21,"duration":6180,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":12,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":99},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":583,"dir":1,"interval":0},{"bytes":359,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":26},{"bytes":166,"dir":2,"interval":70},{"bytes":82,"dir":2,"interval":27},{"bytes":359,"dir":1,"interval":110},{"bytes":80,"dir":2,"interval":16},{"bytes":358,"dir":1,"interval":108},{"bytes":80,"dir":2,"interval":106}],"tls":{"version":"tls1.2","sni":"fourier.alibaba.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52012,"dip":"122.14.43.44","dport":443,"proto":"tcp","c2s_bytes":1205,"s2c_bytes":16406,"c2s_pkts":8,"s2c_pkts":17,"total_pkts":25,"duration":7246,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":830,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":155},{"bytes":53,"dir":1,"interval":15},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":270,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":50},{"bytes":38,"dir":1,"interval":1},{"bytes":1232,"dir":2,"interval":20},{"bytes":1088,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":109,"dir":1,"interval":300},{"bytes":1460,"dir":2,"interval":305},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1141,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"www.tmall.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52014,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1608,"s2c_bytes":48577,"c2s_pkts":8,"s2c_pkts":37,"total_pkts":45,"duration":6852,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":75},{"bytes":58,"dir":1,"interval":6},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":355,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":706,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"g.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52006,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":2911,"s2c_bytes":5575,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":14991,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":34},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1197,"dir":1,"interval":427},{"bytes":691,"dir":2,"interval":89},{"bytes":1197,"dir":1,"interval":2927},{"bytes":691,"dir":2,"interval":2927}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52013,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":2506,"s2c_bytes":228232,"c2s_pkts":18,"s2c_pkts":178,"total_pkts":196,"duration":7000,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":70},{"bytes":58,"dir":1,"interval":17},{"bytes":46,"dir":1,"interval":4},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":225,"dir":1,"interval":0},{"bytes":188,"dir":1,"interval":0},{"bytes":89,"dir":1,"interval":0},{"bytes":71,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":31},{"bytes":31,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1043,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":444,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":107,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1309,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1244,"dir":2,"interval":0},{"bytes":92,"dir":1,"interval":49},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":778,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1011,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":70,"dir":1,"interval":71},{"bytes":1460,"dir":2,"interval":73},{"bytes":1098,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1233,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":108,"dir":1,"interval":50},{"bytes":182,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":55},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":639,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":1369},{"bytes":981,"dir":2,"interval":1369},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1070,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":75},{"bytes":742,"dir":2,"interval":71},{"bytes":31,"dir":2,"interval":29}],"tls":{"version":"tls1.2","sni":"g.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52022,"dip":"106.11.162.147","dport":443,"proto":"tcp","c2s_bytes":2003,"s2c_bytes":11162,"c2s_pkts":10,"s2c_pkts":19,"total_pkts":29,"duration":6686,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":130,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":25},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":337},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":404,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":11},{"bytes":38,"dir":2,"interval":46},{"bytes":766,"dir":2,"interval":90},{"bytes":38,"dir":2,"interval":1},{"bytes":224,"dir":1,"interval":139},{"bytes":602,"dir":2,"interval":128},{"bytes":38,"dir":2,"interval":1},{"bytes":225,"dir":1,"interval":115},{"bytes":602,"dir":2,"interval":99},{"bytes":38,"dir":2,"interval":1},{"bytes":225,"dir":1,"interval":113},{"bytes":603,"dir":2,"interval":119},{"bytes":38,"dir":2,"interval":1},{"bytes":225,"dir":1,"interval":108},{"bytes":604,"dir":2,"interval":113},{"bytes":38,"dir":2,"interval":1}],"tls":{"version":"tls1.2","sni":"h5api.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52023,"dip":"203.119.169.240","dport":443,"proto":"tcp","c2s_bytes":1220,"s2c_bytes":9065,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":6437,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":99},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":478,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":5},{"bytes":38,"dir":2,"interval":47},{"bytes":1229,"dir":2,"interval":8},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":26}],"tls":{"version":"tls1.2","sni":"login.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52011,"dip":"106.11.95.8","dport":443,"proto":"tcp","c2s_bytes":960,"s2c_bytes":5070,"c2s_pkts":6,"s2c_pkts":9,"total_pkts":15,"duration":7671,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":103,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":265},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":260,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":102},{"bytes":468,"dir":2,"interval":83},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.tmall.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52026,"dip":"203.119.169.7","dport":443,"proto":"tcp","c2s_bytes":1317,"s2c_bytes":5268,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":6286,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1279,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":335},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":617,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":28},{"bytes":704,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"pass.tmall.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52016,"dip":"47.102.83.98","dport":443,"proto":"tcp","c2s_bytes":3720,"s2c_bytes":32834,"c2s_pkts":14,"s2c_pkts":34,"total_pkts":48,"duration":6747,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":236},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":388,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":5},{"bytes":38,"dir":2,"interval":49},{"bytes":1036,"dir":2,"interval":27},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":52},{"bytes":328,"dir":1,"interval":535},{"bytes":805,"dir":2,"interval":600},{"bytes":38,"dir":2,"interval":0},{"bytes":225,"dir":1,"interval":73},{"bytes":607,"dir":2,"interval":77},{"bytes":38,"dir":2,"interval":0},{"bytes":391,"dir":1,"interval":92},{"bytes":245,"dir":1,"interval":0},{"bytes":420,"dir":2,"interval":83},{"bytes":38,"dir":2,"interval":0},{"bytes":564,"dir":1,"interval":87},{"bytes":440,"dir":2,"interval":56},{"bytes":38,"dir":2,"interval":0},{"bytes":263,"dir":1,"interval":43},{"bytes":574,"dir":1,"interval":0},{"bytes":1169,"dir":2,"interval":160},{"bytes":1429,"dir":2,"interval":105},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":273,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"h5api.m.tmall.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52005,"dip":"182.61.128.198","dport":443,"proto":"tcp","c2s_bytes":2180,"s2c_bytes":18266,"c2s_pkts":9,"s2c_pkts":21,"total_pkts":30,"duration":17078,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":76,"dir":2,"interval":0},{"bytes":94,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":3},{"bytes":287,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":86},{"bytes":58,"dir":1,"interval":42},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":792,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":76},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":987,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":12},{"bytes":135,"dir":1,"interval":3225},{"bytes":331,"dir":2,"interval":3233}],"tls":{"version":"tls1.2","sni":"g0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52047,"dip":"182.61.128.198","dport":443,"proto":"tcp","c2s_bytes":2229,"s2c_bytes":235517,"c2s_pkts":12,"s2c_pkts":188,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":76,"dir":2,"interval":0},{"bytes":94,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":3},{"bytes":287,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":62},{"bytes":58,"dir":1,"interval":11},{"bytes":46,"dir":1,"interval":12},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":744,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30},{"bytes":31,"dir":1,"interval":4},{"bytes":87,"dir":1,"interval":1},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":405,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":385,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":10},{"bytes":1340,"dir":2,"interval":9},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":25,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":28},{"bytes":35,"dir":1,"interval":63},{"bytes":1340,"dir":2,"interval":85},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":384,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":652,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dlswbr.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51828,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1451,"s2c_bytes":4378,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":94019,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":399},{"bytes":259,"dir":1,"interval":106},{"bytes":270,"dir":2,"interval":173},{"bytes":259,"dir":1,"interval":2805},{"bytes":270,"dir":2,"interval":2805},{"bytes":259,"dir":1,"interval":867},{"bytes":270,"dir":2,"interval":874},{"bytes":31,"dir":1,"interval":30830}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52030,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1059,"s2c_bytes":4241,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":2616,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-1},{"bytes":680,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":32},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":729},{"bytes":53,"dir":1,"interval":21},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":202,"dir":1,"interval":3},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":83},{"bytes":276,"dir":2,"interval":35},{"bytes":31,"dir":1,"interval":1853}],"tls":{"version":"tls1.2","sni":"mesu.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52039,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":3484,"s2c_bytes":4391,"c2s_pkts":5,"s2c_pkts":10,"total_pkts":15,"duration":1560,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1178,"dir":1,"interval":112},{"bytes":213,"dir":2,"interval":109},{"bytes":1452,"dir":1,"interval":1128},{"bytes":306,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":307}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52031,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":10840,"s2c_bytes":5213,"c2s_pkts":12,"s2c_pkts":12,"total_pkts":24,"duration":2745,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":133},{"bytes":96,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":108},{"bytes":1452,"dir":1,"interval":783},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":938,"dir":1,"interval":10},{"bytes":340,"dir":2,"interval":1185},{"bytes":1452,"dir":1,"interval":1486},{"bytes":258,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":1101},{"bytes":1452,"dir":1,"interval":309},{"bytes":288,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":6}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51981,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":3263,"s2c_bytes":12109,"c2s_pkts":4,"s2c_pkts":17,"total_pkts":21,"duration":31262,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":873},{"bytes":596,"dir":1,"interval":0},{"bytes":698,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":514},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":266,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":595,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"feed.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52069,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":1150,"s2c_bytes":7369,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":4219,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":138},{"bytes":53,"dir":1,"interval":30},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":324,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":56},{"bytes":38,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":739,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"file.thepaper.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52046,"dip":"182.61.128.198","dport":443,"proto":"tcp","c2s_bytes":1645,"s2c_bytes":15706,"c2s_pkts":4,"s2c_pkts":16,"total_pkts":20,"duration":12107,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":76,"dir":2,"interval":0},{"bytes":100,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":3},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":48},{"bytes":58,"dir":1,"interval":24},{"bytes":547,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":31},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":184,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbdp02.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52061,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":11016,"s2c_bytes":4858,"c2s_pkts":10,"s2c_pkts":11,"total_pkts":21,"duration":6657,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":373},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":10},{"bytes":1452,"dir":1,"interval":4},{"bytes":210,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":136},{"bytes":1452,"dir":1,"interval":158},{"bytes":125,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":202}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52038,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":52403,"s2c_bytes":9491,"c2s_pkts":51,"s2c_pkts":25,"total_pkts":76,"duration":12595,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":111},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":102},{"bytes":1452,"dir":1,"interval":1128},{"bytes":596,"dir":1,"interval":0},{"bytes":278,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":1160},{"bytes":1452,"dir":1,"interval":307},{"bytes":97,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":286},{"bytes":1114,"dir":1,"interval":2112},{"bytes":213,"dir":2,"interval":2196},{"bytes":1452,"dir":1,"interval":599},{"bytes":249,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":556},{"bytes":1452,"dir":1,"interval":150},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":8,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":107},{"bytes":1452,"dir":1,"interval":254},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1005,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":259},{"bytes":1452,"dir":1,"interval":443},{"bytes":85,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":553},{"bytes":1452,"dir":1,"interval":361},{"bytes":66,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":240},{"bytes":1452,"dir":1,"interval":421},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":135,"dir":1,"interval":1},{"bytes":340,"dir":2,"interval":471},{"bytes":1452,"dir":1,"interval":372},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":672,"dir":1,"interval":16},{"bytes":340,"dir":2,"interval":434},{"bytes":1452,"dir":1,"interval":204},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1192,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":165},{"bytes":1452,"dir":1,"interval":406},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":712,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":770},{"bytes":1452,"dir":1,"interval":584},{"bytes":101,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":293},{"bytes":1452,"dir":1,"interval":351},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":88,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":227},{"bytes":1452,"dir":1,"interval":1521},{"bytes":97,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":1516}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52041,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":2876,"s2c_bytes":34108,"c2s_pkts":3,"s2c_pkts":38,"total_pkts":41,"duration":12426,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1122,"dir":1,"interval":106},{"bytes":1460,"dir":2,"interval":112},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1181,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":668,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":273,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":273,"dir":2,"interval":0},{"bytes":1298,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1237,"dir":1,"interval":966},{"bytes":1460,"dir":2,"interval":893},{"bytes":552,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52009,"dip":"114.112.172.231","dport":443,"proto":"tcp","c2s_bytes":1023,"s2c_bytes":10832,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":30656,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":299,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":103},{"bytes":349,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":44},{"bytes":1460,"dir":2,"interval":0},{"bytes":1270,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":211,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30543}],"tls":{"version":"tls1.2","sni":"mobile.firefoxchina.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52029,"dip":"52.24.142.115","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3403,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":17522,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1371,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"incoming.telemetry.mozilla.org","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52060,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":16386,"s2c_bytes":5198,"c2s_pkts":14,"s2c_pkts":12,"total_pkts":26,"duration":8506,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":363},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":26},{"bytes":17,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":172},{"bytes":1452,"dir":1,"interval":573},{"bytes":97,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":570},{"bytes":1452,"dir":1,"interval":120},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1235,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":83}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52055,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":2270,"s2c_bytes":65310,"c2s_pkts":12,"s2c_pkts":57,"total_pkts":69,"duration":9782,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1892},{"bytes":53,"dir":1,"interval":17},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":745,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":28},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":221,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":177,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":70},{"bytes":1340,"dir":2,"interval":72},{"bytes":219,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"ss2.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52063,"dip":"182.61.62.40","dport":443,"proto":"tcp","c2s_bytes":10404,"s2c_bytes":5295,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":8381,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":32},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":487},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":721,"dir":1,"interval":0},{"bytes":551,"dir":2,"interval":312},{"bytes":1452,"dir":1,"interval":932},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":454,"dir":1,"interval":0},{"bytes":551,"dir":2,"interval":929}],"tls":{"version":"tls1.2","sni":"als.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52070,"dip":"122.14.43.165","dport":443,"proto":"tcp","c2s_bytes":1448,"s2c_bytes":196057,"c2s_pkts":12,"s2c_pkts":141,"total_pkts":153,"duration":6062,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":316},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":322,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":15},{"bytes":38,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":144,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":704,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":100},{"bytes":42,"dir":1,"interval":164},{"bytes":1460,"dir":2,"interval":248},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":383,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"image.thepaper.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52040,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":1624,"s2c_bytes":58581,"c2s_pkts":10,"s2c_pkts":50,"total_pkts":60,"duration":14438,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":76},{"bytes":53,"dir":1,"interval":30},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":245,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":56},{"bytes":1340,"dir":2,"interval":6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":795,"dir":2,"interval":0},{"bytes":82,"dir":1,"interval":58},{"bytes":1340,"dir":2,"interval":52},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":388,"dir":1,"interval":296},{"bytes":1340,"dir":2,"interval":293},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1276,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":83,"dir":1,"interval":4195},{"bytes":1187,"dir":2,"interval":4194}],"tls":{"version":"tls1.2","sni":"sm.bdimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52033,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":10974,"s2c_bytes":54658,"c2s_pkts":14,"s2c_pkts":59,"total_pkts":73,"duration":15566,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":516},{"bytes":87,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":93},{"bytes":1460,"dir":2,"interval":0},{"bytes":593,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":4872},{"bytes":230,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":5156},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":266,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":201,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":211,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":404},{"bytes":596,"dir":1,"interval":0},{"bytes":535,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":462},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":266,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":399,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":624},{"bytes":596,"dir":1,"interval":0},{"bytes":535,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":442},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":267,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":845,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1013},{"bytes":596,"dir":1,"interval":0},{"bytes":22,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1002},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":266,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":484,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"feed.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52042,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":1259,"s2c_bytes":17473,"c2s_pkts":8,"s2c_pkts":20,"total_pkts":28,"duration":13976,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":541},{"bytes":53,"dir":1,"interval":7},{"bytes":50,"dir":1,"interval":1},{"bytes":42,"dir":1,"interval":0},{"bytes":357,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":42},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":104,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":10},{"bytes":76,"dir":1,"interval":271},{"bytes":492,"dir":2,"interval":277}],"tls":{"version":"tls1.2","sni":"s.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52045,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":1490,"s2c_bytes":11896,"c2s_pkts":9,"s2c_pkts":16,"total_pkts":25,"duration":13976,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":547},{"bytes":53,"dir":1,"interval":13},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":398,"dir":1,"interval":0},{"bytes":109,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":48},{"bytes":1340,"dir":2,"interval":4},{"bytes":994,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":593,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":157,"dir":1,"interval":832},{"bytes":461,"dir":2,"interval":828}],"tls":{"version":"tls1.2","sni":"b.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52052,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":29265,"s2c_bytes":6771,"c2s_pkts":25,"s2c_pkts":17,"total_pkts":42,"duration":12859,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":110},{"bytes":596,"dir":1,"interval":0},{"bytes":1221,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":108},{"bytes":1452,"dir":1,"interval":3780},{"bytes":88,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":3800},{"bytes":1452,"dir":1,"interval":449},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1296,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":430},{"bytes":1452,"dir":1,"interval":273},{"bytes":100,"dir":1,"interval":64},{"bytes":340,"dir":2,"interval":314},{"bytes":1452,"dir":1,"interval":121},{"bytes":1452,"dir":1,"interval":83},{"bytes":1452,"dir":1,"interval":22},{"bytes":662,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":262},{"bytes":1452,"dir":1,"interval":351},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":671,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":335},{"bytes":1452,"dir":1,"interval":136},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1159,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":125},{"bytes":1175,"dir":1,"interval":897},{"bytes":213,"dir":2,"interval":1048}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52035,"dip":"182.61.200.166","dport":443,"proto":"tcp","c2s_bytes":5316,"s2c_bytes":19273,"c2s_pkts":5,"s2c_pkts":24,"total_pkts":29,"duration":15481,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1191,"dir":1,"interval":125},{"bytes":328,"dir":2,"interval":24},{"bytes":1033,"dir":1,"interval":9501},{"bytes":1460,"dir":2,"interval":9502},{"bytes":1460,"dir":2,"interval":0},{"bytes":29,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":169,"dir":2,"interval":0},{"bytes":1365,"dir":1,"interval":87},{"bytes":328,"dir":2,"interval":83},{"bytes":1210,"dir":1,"interval":677},{"bytes":328,"dir":2,"interval":677}],"tls":{"version":"tls1.2","sni":"hm.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52068,"dip":"182.61.128.194","dport":443,"proto":"tcp","c2s_bytes":1242,"s2c_bytes":6594,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":6067,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":112},{"bytes":53,"dir":1,"interval":7},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":314,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":31},{"bytes":1340,"dir":2,"interval":4},{"bytes":62,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":93},{"bytes":780,"dir":2,"interval":90}],"tls":{"version":"tls1.2","sni":"gss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52067,"dip":"203.107.36.100","dport":443,"proto":"tcp","c2s_bytes":992,"s2c_bytes":8829,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":6513,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":454,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":26},{"bytes":475,"dir":1,"interval":370},{"bytes":1429,"dir":2,"interval":82},{"bytes":1429,"dir":2,"interval":0},{"bytes":105,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":821,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.thepaper.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52054,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":2694,"s2c_bytes":81162,"c2s_pkts":15,"s2c_pkts":68,"total_pkts":83,"duration":9783,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1890},{"bytes":53,"dir":1,"interval":17},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":743,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":1},{"bytes":140,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":27},{"bytes":38,"dir":1,"interval":3},{"bytes":1340,"dir":2,"interval":7},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1120,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":979,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52056,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":2548,"s2c_bytes":93063,"c2s_pkts":14,"s2c_pkts":77,"total_pkts":91,"duration":9781,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1889},{"bytes":53,"dir":1,"interval":18},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":745,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":137,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":28},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":737,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":778,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":422,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":8},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":-8},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":61},{"bytes":878,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52050,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":1828,"s2c_bytes":6636,"c2s_pkts":2,"s2c_pkts":12,"total_pkts":14,"duration":13129,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1311,"dir":1,"interval":82},{"bytes":1460,"dir":2,"interval":106},{"bytes":964,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52051,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":1648,"s2c_bytes":5314,"c2s_pkts":2,"s2c_pkts":11,"total_pkts":13,"duration":13122,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1131,"dir":1,"interval":117},{"bytes":1102,"dir":2,"interval":69},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52032,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":4415,"s2c_bytes":5420,"c2s_pkts":4,"s2c_pkts":12,"total_pkts":16,"duration":15586,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1164,"dir":1,"interval":454},{"bytes":380,"dir":2,"interval":42},{"bytes":1384,"dir":1,"interval":2548},{"bytes":379,"dir":2,"interval":2540},{"bytes":1350,"dir":1,"interval":794},{"bytes":381,"dir":2,"interval":1020}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52037,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":3329,"s2c_bytes":5024,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":15112,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1372,"dir":1,"interval":494},{"bytes":380,"dir":2,"interval":82},{"bytes":1440,"dir":1,"interval":2035},{"bytes":379,"dir":2,"interval":2032}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52062,"dip":"182.61.200.7","dport":443,"proto":"tcp","c2s_bytes":3831,"s2c_bytes":4704,"c2s_pkts":5,"s2c_pkts":11,"total_pkts":16,"duration":8455,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":324},{"bytes":192,"dir":1,"interval":0},{"bytes":212,"dir":2,"interval":48},{"bytes":1452,"dir":1,"interval":1167},{"bytes":218,"dir":1,"interval":0},{"bytes":212,"dir":2,"interval":1168}],"tls":{"version":"tls1.2","sni":"sp0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52036,"dip":"182.61.200.1","dport":443,"proto":"tcp","c2s_bytes":2037,"s2c_bytes":5607,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":15115,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":494},{"bytes":68,"dir":1,"interval":0},{"bytes":1342,"dir":2,"interval":80}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52043,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":1724,"s2c_bytes":45877,"c2s_pkts":8,"s2c_pkts":40,"total_pkts":48,"duration":13979,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":543},{"bytes":53,"dir":1,"interval":16},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":856,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":51},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":599,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":63}],"tls":{"version":"tls1.2","sni":"f12.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52057,"dip":"182.61.128.195","dport":443,"proto":"tcp","c2s_bytes":1260,"s2c_bytes":11095,"c2s_pkts":7,"s2c_pkts":13,"total_pkts":20,"duration":9784,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":407},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":434,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":58},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1285,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52034,"dip":"17.248.161.5","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3340,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":17597,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":444,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51878,"dip":"173.252.100.21","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":63187,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52053,"dip":"17.248.161.50","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5622,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":19858,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":94,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52077,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":7409,"s2c_bytes":253820,"c2s_pkts":15,"s2c_pkts":185,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":11},{"bytes":522,"dir":1,"interval":143},{"bytes":1448,"dir":2,"interval":51},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1197,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":155},{"bytes":1448,"dir":2,"interval":151},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":692,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":19},{"bytes":1448,"dir":2,"interval":18},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1287,"dir":2,"interval":0},{"bytes":488,"dir":1,"interval":52},{"bytes":1448,"dir":2,"interval":51},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":306,"dir":2,"interval":0},{"bytes":488,"dir":1,"interval":22},{"bytes":1448,"dir":2,"interval":23},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":49},{"bytes":1448,"dir":2,"interval":46},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":471,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":32},{"bytes":1448,"dir":2,"interval":32},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":892,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":19},{"bytes":1448,"dir":2,"interval":18},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":307,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":14},{"bytes":1448,"dir":2,"interval":14},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":329,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":94},{"bytes":1448,"dir":2,"interval":93},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":63,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":23},{"bytes":1448,"dir":2,"interval":22},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":492,"dir":2,"interval":0},{"bytes":485,"dir":1,"interval":43},{"bytes":1448,"dir":2,"interval":42},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":506,"dir":1,"interval":19},{"bytes":1448,"dir":2,"interval":18},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":766,"dir":2,"interval":0},{"bytes":484,"dir":1,"interval":33},{"bytes":1448,"dir":2,"interval":30},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52080,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":8461,"s2c_bytes":245963,"c2s_pkts":17,"s2c_pkts":183,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":492,"dir":1,"interval":179},{"bytes":1448,"dir":2,"interval":100},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":397,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":18},{"bytes":1448,"dir":2,"interval":17},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":14},{"bytes":1448,"dir":2,"interval":13},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":164,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":101},{"bytes":1448,"dir":2,"interval":101},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1253,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":23},{"bytes":1448,"dir":2,"interval":21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":522,"dir":2,"interval":0},{"bytes":492,"dir":1,"interval":38},{"bytes":1448,"dir":2,"interval":37},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1201,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":13},{"bytes":1448,"dir":2,"interval":12},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":506,"dir":1,"interval":26},{"bytes":1448,"dir":2,"interval":25},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":304,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":35},{"bytes":1448,"dir":2,"interval":27},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":8,"dir":2,"interval":0},{"bytes":499,"dir":1,"interval":118},{"bytes":1448,"dir":2,"interval":121},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":522,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":291},{"bytes":1448,"dir":2,"interval":284},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":8,"dir":2,"interval":0},{"bytes":497,"dir":1,"interval":53},{"bytes":1448,"dir":2,"interval":52},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":614,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":153},{"bytes":1448,"dir":2,"interval":152},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":7,"dir":2,"interval":0},{"bytes":482,"dir":1,"interval":55},{"bytes":1448,"dir":2,"interval":52},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":317,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":1026},{"bytes":1448,"dir":2,"interval":1026},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":217,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":43},{"bytes":1448,"dir":2,"interval":45},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52096,"dip":"111.206.227.174","dport":443,"proto":"tcp","c2s_bytes":1041,"s2c_bytes":4537,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":90,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":524,"dir":1,"interval":79},{"bytes":358,"dir":2,"interval":32},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"fd.3.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52101,"dip":"211.144.24.78","dport":443,"proto":"tcp","c2s_bytes":1991,"s2c_bytes":4365,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":139,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":1460,"dir":1,"interval":133},{"bytes":14,"dir":1,"interval":0},{"bytes":186,"dir":2,"interval":43},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"im-x.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52093,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1385,"s2c_bytes":5155,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":4412,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":837,"dir":1,"interval":621},{"bytes":1010,"dir":2,"interval":294},{"bytes":31,"dir":1,"interval":3786}],"tls":{"version":"tls1.2","sni":"wqs.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52082,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":3556,"s2c_bytes":45972,"c2s_pkts":8,"s2c_pkts":37,"total_pkts":45,"duration":5412,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":490,"dir":1,"interval":682},{"bytes":1448,"dir":2,"interval":49},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1043,"dir":2,"interval":0},{"bytes":501,"dir":1,"interval":403},{"bytes":1448,"dir":2,"interval":402},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":484,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":41},{"bytes":1448,"dir":2,"interval":41},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":159,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":80},{"bytes":1448,"dir":2,"interval":82},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":636,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":111},{"bytes":1448,"dir":2,"interval":107},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":0},{"bytes":503,"dir":1,"interval":46},{"bytes":1448,"dir":2,"interval":44},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":217,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":4042}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52081,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":3525,"s2c_bytes":66144,"c2s_pkts":8,"s2c_pkts":49,"total_pkts":57,"duration":6282,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":491,"dir":1,"interval":866},{"bytes":1448,"dir":2,"interval":199},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":940,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":1081},{"bytes":1448,"dir":2,"interval":1079},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":676,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":91},{"bytes":1448,"dir":2,"interval":89},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1293,"dir":2,"interval":0},{"bytes":494,"dir":1,"interval":34},{"bytes":1448,"dir":2,"interval":36},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":390,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":110},{"bytes":1448,"dir":2,"interval":105},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1267,"dir":2,"interval":0},{"bytes":479,"dir":1,"interval":2813},{"bytes":1448,"dir":2,"interval":2808},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":1281}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52091,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":997,"s2c_bytes":25904,"c2s_pkts":3,"s2c_pkts":20,"total_pkts":23,"duration":3798,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":449,"dir":1,"interval":490},{"bytes":1448,"dir":2,"interval":26},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":3302}],"tls":{"version":"tls1.2","sni":"st.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52078,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":904,"s2c_bytes":33962,"c2s_pkts":3,"s2c_pkts":25,"total_pkts":28,"duration":6779,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":356,"dir":1,"interval":136},{"bytes":1448,"dir":2,"interval":78},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":857,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":6635}],"tls":{"version":"tls1.2","sni":"wl.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52098,"dip":"211.144.24.122","dport":443,"proto":"tcp","c2s_bytes":1764,"s2c_bytes":4359,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":3047,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":167},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1064,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":45},{"bytes":110,"dir":2,"interval":3}],"tls":{"version":"tls1.2","sni":"knicks.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52074,"dip":"211.144.24.232","dport":443,"proto":"tcp","c2s_bytes":976,"s2c_bytes":57077,"c2s_pkts":7,"s2c_pkts":43,"total_pkts":50,"duration":7198,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":168},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":234,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":112},{"bytes":38,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":148},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":268,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":231}],"tls":{"version":"tls1.2","sni":"m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52083,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":938,"s2c_bytes":56073,"c2s_pkts":2,"s2c_pkts":40,"total_pkts":42,"duration":5426,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":421,"dir":1,"interval":681},{"bytes":1448,"dir":2,"interval":43},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1263,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52086,"dip":"221.204.13.129","dport":443,"proto":"tcp","c2s_bytes":1465,"s2c_bytes":67618,"c2s_pkts":10,"s2c_pkts":52,"total_pkts":62,"duration":5427,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":961,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":755},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":315,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":111,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":319,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":235,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"img14.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52090,"dip":"211.144.24.235","dport":443,"proto":"tcp","c2s_bytes":1871,"s2c_bytes":5408,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":4523,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":104},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":545,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":34},{"bytes":556,"dir":2,"interval":31},{"bytes":510,"dir":1,"interval":881},{"bytes":232,"dir":2,"interval":852},{"bytes":116,"dir":1,"interval":2315},{"bytes":371,"dir":2,"interval":2322}],"tls":{"version":"tls1.2","sni":"wq.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52084,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1420,"s2c_bytes":23576,"c2s_pkts":3,"s2c_pkts":19,"total_pkts":22,"duration":5426,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":426,"dir":1,"interval":681},{"bytes":1448,"dir":2,"interval":42},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":153,"dir":2,"interval":0},{"bytes":477,"dir":1,"interval":97},{"bytes":1448,"dir":2,"interval":97},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":469,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52076,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1448,"s2c_bytes":27124,"c2s_pkts":3,"s2c_pkts":21,"total_pkts":24,"duration":6783,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":427,"dir":1,"interval":136},{"bytes":1448,"dir":2,"interval":58},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":783,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":2099},{"bytes":1448,"dir":2,"interval":2095},{"bytes":1448,"dir":2,"interval":0},{"bytes":476,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52079,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":945,"s2c_bytes":110686,"c2s_pkts":2,"s2c_pkts":79,"total_pkts":81,"duration":6491,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":428,"dir":1,"interval":1065},{"bytes":1448,"dir":2,"interval":198},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":436,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52085,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1858,"s2c_bytes":71430,"c2s_pkts":4,"s2c_pkts":52,"total_pkts":56,"duration":5426,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":480,"dir":1,"interval":648},{"bytes":1448,"dir":2,"interval":45},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":27,"dir":2,"interval":0},{"bytes":471,"dir":1,"interval":130},{"bytes":1448,"dir":2,"interval":119},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1087,"dir":2,"interval":0},{"bytes":390,"dir":1,"interval":179},{"bytes":1448,"dir":2,"interval":181},{"bytes":1026,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52100,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":965,"s2c_bytes":5094,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":1465,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":122},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":265,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":39},{"bytes":38,"dir":1,"interval":12},{"bytes":845,"dir":2,"interval":14}],"tls":{"version":"tls1.2","sni":"mapi.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52092,"dip":"211.144.24.235","dport":443,"proto":"tcp","c2s_bytes":1275,"s2c_bytes":16098,"c2s_pkts":6,"s2c_pkts":15,"total_pkts":21,"duration":4428,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":79},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":575,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":158},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":169,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wqcoss.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52099,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":1866,"s2c_bytes":8321,"c2s_pkts":9,"s2c_pkts":10,"total_pkts":19,"duration":1467,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":122},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":561,"dir":1,"interval":0},{"bytes":127,"dir":1,"interval":0},{"bytes":402,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":38},{"bytes":38,"dir":1,"interval":12},{"bytes":1132,"dir":2,"interval":10},{"bytes":1162,"dir":2,"interval":3},{"bytes":1205,"dir":2,"interval":2},{"bytes":76,"dir":1,"interval":108},{"bytes":573,"dir":2,"interval":116}],"tls":{"version":"tls1.2","sni":"mapi.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52075,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":5061,"s2c_bytes":87523,"c2s_pkts":12,"s2c_pkts":66,"total_pkts":78,"duration":6784,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":393,"dir":1,"interval":143},{"bytes":1448,"dir":2,"interval":50},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":155},{"bytes":1448,"dir":2,"interval":151},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1148,"dir":2,"interval":0},{"bytes":403,"dir":1,"interval":48},{"bytes":1448,"dir":2,"interval":45},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1354,"dir":2,"interval":0},{"bytes":402,"dir":1,"interval":23},{"bytes":1448,"dir":2,"interval":23},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":417,"dir":1,"interval":23},{"bytes":1448,"dir":2,"interval":22},{"bytes":1448,"dir":2,"interval":0},{"bytes":933,"dir":2,"interval":0},{"bytes":399,"dir":1,"interval":38},{"bytes":1448,"dir":2,"interval":38},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1403,"dir":2,"interval":0},{"bytes":468,"dir":1,"interval":1701},{"bytes":1448,"dir":2,"interval":1701},{"bytes":740,"dir":2,"interval":0},{"bytes":409,"dir":1,"interval":178},{"bytes":1448,"dir":2,"interval":178},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":766,"dir":2,"interval":0},{"bytes":404,"dir":1,"interval":792},{"bytes":1448,"dir":2,"interval":791},{"bytes":266,"dir":2,"interval":0},{"bytes":429,"dir":1,"interval":842},{"bytes":1448,"dir":2,"interval":843},{"bytes":595,"dir":2,"interval":0},{"bytes":415,"dir":1,"interval":1710},{"bytes":1221,"dir":2,"interval":1709}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52088,"dip":"211.144.24.64","dport":443,"proto":"tcp","c2s_bytes":8693,"s2c_bytes":5714,"c2s_pkts":18,"s2c_pkts":17,"total_pkts":35,"duration":4559,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":138},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":255,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":1178,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":34},{"bytes":55,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":4},{"bytes":207,"dir":2,"interval":2},{"bytes":72,"dir":1,"interval":45},{"bytes":1156,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":40},{"bytes":207,"dir":2,"interval":4},{"bytes":72,"dir":1,"interval":3283},{"bytes":1169,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":3279},{"bytes":207,"dir":2,"interval":7},{"bytes":72,"dir":1,"interval":122},{"bytes":1143,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":115},{"bytes":207,"dir":2,"interval":7},{"bytes":72,"dir":1,"interval":868},{"bytes":1182,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":861},{"bytes":207,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"uranus.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52089,"dip":"119.188.142.1","dport":443,"proto":"tcp","c2s_bytes":2049,"s2c_bytes":149328,"c2s_pkts":16,"s2c_pkts":112,"total_pkts":128,"duration":4543,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":961,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":170},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":312,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":4},{"bytes":38,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1248,"dir":2,"interval":0},{"bytes":115,"dir":1,"interval":713},{"bytes":1460,"dir":2,"interval":704},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":518,"dir":2,"interval":0},{"bytes":112,"dir":1,"interval":2424},{"bytes":113,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":112,"dir":1,"interval":0},{"bytes":112,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":2424},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":121,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":28,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":688,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1237,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":103},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":109,"dir":1,"interval":15},{"bytes":109,"dir":1,"interval":0},{"bytes":107,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":487,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":495,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1058,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":464,"dir":2,"interval":13}],"tls":{"version":"tls1.2","sni":"img11.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52072,"dip":"52.24.142.115","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3403,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":19408,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1371,"dir":2,"interval":1}],"tls":{"version":"tls1.2","sni":"incoming.telemetry.mozilla.org","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52028,"dip":"122.14.43.44","dport":443,"proto":"tcp","c2s_bytes":1033,"s2c_bytes":5877,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":41893,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":829,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":103},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":207,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":3},{"bytes":281,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":7}],"tls":{"version":"tls1.2","sni":"www.tmall.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52073,"dip":"172.217.160.109","dport":443,"proto":"tcp","c2s_bytes":1585,"s2c_bytes":3060,"c2s_pkts":8,"s2c_pkts":3,"total_pkts":11,"duration":10205,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":249},{"bytes":58,"dir":1,"interval":24},{"bytes":46,"dir":1,"interval":1},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":331,"dir":1,"interval":0},{"bytes":32,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"accounts.google.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52095,"dip":"172.217.24.10","dport":443,"proto":"tcp","c2s_bytes":1698,"s2c_bytes":3930,"c2s_pkts":8,"s2c_pkts":4,"total_pkts":12,"duration":10207,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":450,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":247},{"bytes":58,"dir":1,"interval":45},{"bytes":46,"dir":1,"interval":4},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":157,"dir":1,"interval":0},{"bytes":319,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"play.googleapis.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52103,"dip":"172.217.160.109","dport":443,"proto":"tcp","c2s_bytes":1760,"s2c_bytes":3060,"c2s_pkts":8,"s2c_pkts":3,"total_pkts":11,"duration":10213,"packets":[{"bytes":588,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":0},{"bytes":627,"dir":1,"interval":275},{"bytes":58,"dir":1,"interval":19},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":331,"dir":1,"interval":0},{"bytes":32,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"accounts.google.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52087,"dip":"17.248.161.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5623,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":19477,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":600,"dir":2,"interval":0},{"bytes":679,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52107,"dip":"182.61.200.5","dport":443,"proto":"tcp","c2s_bytes":4632,"s2c_bytes":239521,"c2s_pkts":6,"s2c_pkts":194,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":889,"dir":1,"interval":126},{"bytes":1460,"dir":2,"interval":307},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":262,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":432,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":260,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":85,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":658,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1251,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":275,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":113,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":486,"dir":2,"interval":0},{"bytes":1151,"dir":1,"interval":353},{"bytes":862,"dir":2,"interval":74},{"bytes":1452,"dir":1,"interval":18},{"bytes":596,"dir":1,"interval":0},{"bytes":27,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":54},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":261,"dir":2,"interval":0},{"bytes":782,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1030,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1234,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49889,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":4374,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":122,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":119}],"tls":{"version":"tls1.2","sni":"sm.bdimg.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["1301","1302","1303","c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[0,23,65281,10,11,35,16,5,13,18,51,45,43,27,21]}}
{"sip":"192.168.50.193","sport":52097,"dip":"17.42.254.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":19224,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52117,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":6314,"s2c_bytes":4873,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":1126,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":353},{"bytes":173,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":85},{"bytes":1452,"dir":1,"interval":756},{"bytes":1452,"dir":1,"interval":0},{"bytes":1237,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":10},{"bytes":340,"dir":2,"interval":756}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52124,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4374,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":177,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52113,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4374,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1155,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss2.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52115,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4374,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1166,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52133,"dip":"182.61.128.198","dport":443,"proto":"tcp","c2s_bytes":2311,"s2c_bytes":233226,"c2s_pkts":12,"s2c_pkts":188,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":76,"dir":2,"interval":0},{"bytes":94,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":4},{"bytes":287,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":84},{"bytes":58,"dir":1,"interval":10},{"bytes":46,"dir":1,"interval":1},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":809,"dir":1,"interval":1},{"bytes":31,"dir":2,"interval":17},{"bytes":31,"dir":1,"interval":6},{"bytes":1340,"dir":2,"interval":6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":11},{"bytes":1340,"dir":2,"interval":11},{"bytes":1203,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":553,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":6},{"bytes":1340,"dir":2,"interval":8},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":21,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":16},{"bytes":35,"dir":1,"interval":51},{"bytes":1340,"dir":2,"interval":57},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1059,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dlswbr.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52120,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":1498,"s2c_bytes":235722,"c2s_pkts":12,"s2c_pkts":188,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":504},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":242,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":42},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":433,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":1875},{"bytes":492,"dir":2,"interval":1872},{"bytes":82,"dir":1,"interval":167},{"bytes":1340,"dir":2,"interval":167},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1079,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":69},{"bytes":1340,"dir":2,"interval":62},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":398,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":915,"dir":2,"interval":0},{"bytes":141,"dir":1,"interval":1152},{"bytes":1340,"dir":2,"interval":1141},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52118,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":3495,"s2c_bytes":195924,"c2s_pkts":32,"s2c_pkts":168,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":81},{"bytes":53,"dir":1,"interval":42},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":245,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":70},{"bytes":1340,"dir":2,"interval":4},{"bytes":1340,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":71},{"bytes":87,"dir":1,"interval":128},{"bytes":89,"dir":1,"interval":1},{"bytes":1340,"dir":2,"interval":188},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":796,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":350,"dir":2,"interval":0},{"bytes":94,"dir":1,"interval":6},{"bytes":97,"dir":1,"interval":0},{"bytes":453,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":2},{"bytes":785,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":88,"dir":1,"interval":1296},{"bytes":1340,"dir":2,"interval":1297},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":795,"dir":2,"interval":0},{"bytes":82,"dir":1,"interval":159},{"bytes":1340,"dir":2,"interval":156},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":150},{"bytes":1340,"dir":2,"interval":147},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":75,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":94,"dir":1,"interval":2672},{"bytes":91,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":88,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":0},{"bytes":97,"dir":1,"interval":0},{"bytes":98,"dir":1,"interval":0},{"bytes":573,"dir":2,"interval":2671},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":89,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1016,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":191,"dir":2,"interval":0},{"bytes":569,"dir":2,"interval":0},{"bytes":599,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":95,"dir":1,"interval":13},{"bytes":93,"dir":1,"interval":1},{"bytes":96,"dir":1,"interval":1},{"bytes":100,"dir":1,"interval":0},{"bytes":1033,"dir":2,"interval":10},{"bytes":1340,"dir":2,"interval":4},{"bytes":880,"dir":2,"interval":0},{"bytes":468,"dir":2,"interval":0},{"bytes":1188,"dir":2,"interval":0},{"bytes":96,"dir":1,"interval":17},{"bytes":91,"dir":1,"interval":0},{"bytes":86,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"sm.bdimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52116,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":1815,"s2c_bytes":227649,"c2s_pkts":15,"s2c_pkts":185,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":543},{"bytes":53,"dir":1,"interval":12},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":285,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":109},{"bytes":1340,"dir":2,"interval":4},{"bytes":478,"dir":2,"interval":0},{"bytes":120,"dir":1,"interval":1606},{"bytes":80,"dir":1,"interval":0},{"bytes":109,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":1605},{"bytes":1340,"dir":2,"interval":0},{"bytes":56,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":593,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":994,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":94,"dir":1,"interval":786},{"bytes":1340,"dir":2,"interval":784},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1275,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":297,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":70},{"bytes":1340,"dir":2,"interval":63},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":546,"dir":2,"interval":0},{"bytes":86,"dir":1,"interval":2029},{"bytes":1340,"dir":2,"interval":2031},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":89,"dir":1,"interval":9},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":84,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":202,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1277,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"b.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52105,"dip":"172.217.27.138","dport":443,"proto":"tcp","c2s_bytes":1814,"s2c_bytes":3931,"c2s_pkts":8,"s2c_pkts":4,"total_pkts":12,"duration":10232,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":451,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":335},{"bytes":58,"dir":1,"interval":25},{"bytes":46,"dir":1,"interval":1},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":181,"dir":1,"interval":0},{"bytes":411,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"www.googleapis.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52121,"dip":"172.217.160.109","dport":443,"proto":"tcp","c2s_bytes":1760,"s2c_bytes":3060,"c2s_pkts":8,"s2c_pkts":3,"total_pkts":11,"duration":10280,"packets":[{"bytes":588,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":0},{"bytes":627,"dir":1,"interval":321},{"bytes":58,"dir":1,"interval":4},{"bytes":46,"dir":1,"interval":11},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":331,"dir":1,"interval":0},{"bytes":32,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"accounts.google.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52122,"dip":"182.61.200.166","dport":443,"proto":"tcp","c2s_bytes":5346,"s2c_bytes":19025,"c2s_pkts":5,"s2c_pkts":24,"total_pkts":29,"duration":11320,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1053,"dir":1,"interval":130},{"bytes":1460,"dir":2,"interval":58},{"bytes":1460,"dir":2,"interval":0},{"bytes":29,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1090,"dir":2,"interval":2},{"bytes":1289,"dir":1,"interval":104},{"bytes":328,"dir":2,"interval":100},{"bytes":1128,"dir":1,"interval":1028},{"bytes":237,"dir":2,"interval":1037},{"bytes":1359,"dir":1,"interval":35},{"bytes":328,"dir":2,"interval":39},{"bytes":31,"dir":2,"interval":10000}],"tls":{"version":"tls1.2","sni":"hm.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52108,"dip":"17.248.161.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5623,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":19416,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":600,"dir":2,"interval":0},{"bytes":679,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49890,"dip":"182.61.128.221","dport":443,"proto":"tcp","c2s_bytes":1107,"s2c_bytes":27932,"c2s_pkts":6,"s2c_pkts":29,"total_pkts":35,"duration":20129,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":118},{"bytes":93,"dir":1,"interval":0},{"bytes":246,"dir":1,"interval":0},{"bytes":87,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":63},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":875,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":60},{"bytes":46,"dir":2,"interval":19998},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sm.bdimg.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["1301","1302","1303","c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[0,23,65281,10,11,35,16,5,13,18,51,45,43,27,21]}}
{"sip":"192.168.50.193","sport":52114,"dip":"182.61.128.195","dport":443,"proto":"tcp","c2s_bytes":1260,"s2c_bytes":11060,"c2s_pkts":7,"s2c_pkts":15,"total_pkts":22,"duration":20550,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":440},{"bytes":53,"dir":1,"interval":101},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":434,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":137},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1173,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":7},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52160,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":6333,"s2c_bytes":260423,"c2s_pkts":13,"s2c_pkts":187,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":478,"dir":1,"interval":839},{"bytes":1400,"dir":2,"interval":64},{"bytes":479,"dir":1,"interval":155},{"bytes":1448,"dir":2,"interval":156},{"bytes":919,"dir":2,"interval":0},{"bytes":479,"dir":1,"interval":17},{"bytes":1448,"dir":2,"interval":17},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":480,"dir":1,"interval":25},{"bytes":1448,"dir":2,"interval":25},{"bytes":1448,"dir":2,"interval":0},{"bytes":795,"dir":2,"interval":0},{"bytes":479,"dir":1,"interval":12},{"bytes":1443,"dir":2,"interval":12},{"bytes":491,"dir":1,"interval":781},{"bytes":1448,"dir":2,"interval":782},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":940,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":37},{"bytes":1448,"dir":2,"interval":34},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":692,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":205},{"bytes":1448,"dir":2,"interval":207},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":471,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":55},{"bytes":1448,"dir":2,"interval":49},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":164,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":27},{"bytes":1448,"dir":2,"interval":27},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":63,"dir":2,"interval":0},{"bytes":485,"dir":1,"interval":61},{"bytes":1448,"dir":2,"interval":56},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":484,"dir":1,"interval":55},{"bytes":1448,"dir":2,"interval":53},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52128,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":2218,"s2c_bytes":51796,"c2s_pkts":11,"s2c_pkts":48,"total_pkts":59,"duration":21775,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1709},{"bytes":53,"dir":1,"interval":55},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":831,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":101},{"bytes":1340,"dir":2,"interval":2},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":1},{"bytes":46,"dir":2,"interval":19992},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss2.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52127,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":2637,"s2c_bytes":105539,"c2s_pkts":14,"s2c_pkts":86,"total_pkts":100,"duration":21775,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1709},{"bytes":53,"dir":1,"interval":55},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":830,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":99},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1148,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":158,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":19987},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss1.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52129,"dip":"182.61.128.196","dport":443,"proto":"tcp","c2s_bytes":1936,"s2c_bytes":43335,"c2s_pkts":9,"s2c_pkts":39,"total_pkts":48,"duration":21775,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1709},{"bytes":53,"dir":1,"interval":56},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":830,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":102},{"bytes":1340,"dir":2,"interval":6},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":947,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":379,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":19988},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ss0.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52155,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":10348,"s2c_bytes":241938,"c2s_pkts":21,"s2c_pkts":179,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":480,"dir":1,"interval":390},{"bytes":1343,"dir":2,"interval":86},{"bytes":480,"dir":1,"interval":16},{"bytes":1448,"dir":2,"interval":18},{"bytes":150,"dir":2,"interval":0},{"bytes":479,"dir":1,"interval":262},{"bytes":1448,"dir":2,"interval":261},{"bytes":213,"dir":2,"interval":0},{"bytes":481,"dir":1,"interval":497},{"bytes":1448,"dir":2,"interval":497},{"bytes":1448,"dir":2,"interval":0},{"bytes":1425,"dir":2,"interval":0},{"bytes":478,"dir":1,"interval":22},{"bytes":1448,"dir":2,"interval":22},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":372,"dir":2,"interval":0},{"bytes":480,"dir":1,"interval":44},{"bytes":1448,"dir":2,"interval":42},{"bytes":1448,"dir":2,"interval":0},{"bytes":780,"dir":2,"interval":0},{"bytes":481,"dir":1,"interval":161},{"bytes":1448,"dir":2,"interval":161},{"bytes":761,"dir":2,"interval":0},{"bytes":481,"dir":1,"interval":17},{"bytes":1448,"dir":2,"interval":17},{"bytes":1448,"dir":2,"interval":0},{"bytes":1174,"dir":2,"interval":0},{"bytes":480,"dir":1,"interval":26},{"bytes":1448,"dir":2,"interval":26},{"bytes":1448,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":0},{"bytes":522,"dir":1,"interval":792},{"bytes":1448,"dir":2,"interval":792},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1197,"dir":2,"interval":0},{"bytes":488,"dir":1,"interval":242},{"bytes":1448,"dir":2,"interval":238},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":54},{"bytes":1448,"dir":2,"interval":53},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":307,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":29},{"bytes":1448,"dir":2,"interval":29},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":522,"dir":2,"interval":1},{"bytes":506,"dir":1,"interval":66},{"bytes":1448,"dir":2,"interval":64},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1267,"dir":2,"interval":0},{"bytes":499,"dir":1,"interval":326},{"bytes":1448,"dir":2,"interval":317},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":455,"dir":2,"interval":0},{"bytes":482,"dir":1,"interval":167},{"bytes":1448,"dir":2,"interval":163},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":317,"dir":2,"interval":0},{"bytes":524,"dir":1,"interval":719},{"bytes":1448,"dir":2,"interval":719},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":239,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":156},{"bytes":1448,"dir":2,"interval":154},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1419,"dir":2,"interval":0},{"bytes":499,"dir":1,"interval":115},{"bytes":1448,"dir":2,"interval":114},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":415,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":60},{"bytes":1448,"dir":2,"interval":61},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52181,"dip":"111.206.227.174","dport":443,"proto":"tcp","c2s_bytes":1041,"s2c_bytes":4537,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":153,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":524,"dir":1,"interval":140},{"bytes":358,"dir":2,"interval":101},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"fd.3.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52110,"dip":"182.61.128.220","dport":443,"proto":"tcp","c2s_bytes":3220,"s2c_bytes":158234,"c2s_pkts":15,"s2c_pkts":136,"total_pkts":151,"duration":24786,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":557},{"bytes":53,"dir":1,"interval":12},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":759,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":118},{"bytes":1340,"dir":2,"interval":5},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":990,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":157,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":123,"dir":1,"interval":106},{"bytes":1340,"dir":2,"interval":112},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":351,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":563,"dir":2,"interval":0},{"bytes":746,"dir":1,"interval":1510},{"bytes":139,"dir":1,"interval":0},{"bytes":148,"dir":1,"interval":0},{"bytes":138,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":1498},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":391,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":512,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":770,"dir":2,"interval":0},{"bytes":135,"dir":1,"interval":2589},{"bytes":106,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":2583},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1079,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1340,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"imgsa.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52125,"dip":"182.61.128.194","dport":443,"proto":"tcp","c2s_bytes":1992,"s2c_bytes":49153,"c2s_pkts":18,"s2c_pkts":48,"total_pkts":66,"duration":24037,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":11,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":102},{"bytes":53,"dir":1,"interval":4},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":297,"dir":1,"interval":1},{"bytes":106,"dir":1,"interval":0},{"bytes":104,"dir":1,"interval":0},{"bytes":97,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":39},{"bytes":1194,"dir":2,"interval":3},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":424,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1259,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1156,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":10},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":682},{"bytes":1194,"dir":2,"interval":689},{"bytes":104,"dir":1,"interval":30},{"bytes":97,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":30},{"bytes":1340,"dir":2,"interval":0},{"bytes":424,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":1},{"bytes":1080,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":3199},{"bytes":1306,"dir":2,"interval":3197},{"bytes":46,"dir":2,"interval":20000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gss0.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52172,"dip":"119.188.142.1","dport":443,"proto":"tcp","c2s_bytes":2896,"s2c_bytes":252727,"c2s_pkts":21,"s2c_pkts":179,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":961,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":18},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":383},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":312,"dir":1,"interval":0},{"bytes":112,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":112,"dir":1,"interval":0},{"bytes":112,"dir":1,"interval":0},{"bytes":109,"dir":1,"interval":0},{"bytes":109,"dir":1,"interval":0},{"bytes":107,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":232},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":736,"dir":2,"interval":0},{"bytes":115,"dir":1,"interval":261},{"bytes":1460,"dir":2,"interval":201},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":487,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":480,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":73},{"bytes":363,"dir":1,"interval":940},{"bytes":108,"dir":1,"interval":-50},{"bytes":118,"dir":1,"interval":0},{"bytes":122,"dir":1,"interval":0},{"bytes":136,"dir":1,"interval":52},{"bytes":1460,"dir":2,"interval":1009},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"img11.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52166,"dip":"221.204.13.129","dport":443,"proto":"tcp","c2s_bytes":2398,"s2c_bytes":252547,"c2s_pkts":19,"s2c_pkts":181,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":961,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":241},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":315,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":111,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":113,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":65},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":580,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1405,"dir":2,"interval":0},{"bytes":128,"dir":1,"interval":3009},{"bytes":118,"dir":1,"interval":0},{"bytes":1396,"dir":2,"interval":2969},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":121,"dir":1,"interval":419},{"bytes":122,"dir":1,"interval":3},{"bytes":118,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":392},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":604,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":218},{"bytes":120,"dir":1,"interval":245},{"bytes":122,"dir":1,"interval":-4},{"bytes":42,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":396},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"img14.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49885,"dip":"203.208.39.255","dport":443,"proto":"tcp","c2s_bytes":8073,"s2c_bytes":6157,"c2s_pkts":17,"s2c_pkts":17,"total_pkts":34,"duration":37544,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1035,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":134},{"bytes":58,"dir":1,"interval":16},{"bytes":596,"dir":2,"interval":41},{"bytes":86,"dir":1,"interval":15},{"bytes":381,"dir":1,"interval":14},{"bytes":488,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":56},{"bytes":317,"dir":2,"interval":55},{"bytes":266,"dir":2,"interval":0},{"bytes":118,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":39,"dir":1,"interval":93},{"bytes":146,"dir":1,"interval":3003},{"bytes":1448,"dir":1,"interval":1},{"bytes":1435,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":1},{"bytes":366,"dir":1,"interval":0},{"bytes":69,"dir":2,"interval":3099},{"bytes":179,"dir":2,"interval":0},{"bytes":272,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":39,"dir":1,"interval":97},{"bytes":137,"dir":1,"interval":3024},{"bytes":892,"dir":1,"interval":0},{"bytes":69,"dir":2,"interval":3121},{"bytes":129,"dir":2,"interval":0},{"bytes":63,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":39,"dir":1,"interval":125}],"tls":{"version":"tls1.2","sni":"clientservices.googleapis.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["1301","1302","1303","c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[0,23,65281,10,11,35,16,5,13,18,51,45,43,27,21]}}
{"sip":"192.168.50.193","sport":52153,"dip":"172.217.160.109","dport":443,"proto":"tcp","c2s_bytes":1760,"s2c_bytes":3060,"c2s_pkts":8,"s2c_pkts":3,"total_pkts":11,"duration":10193,"packets":[{"bytes":588,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":0},{"bytes":627,"dir":1,"interval":219},{"bytes":58,"dir":1,"interval":4},{"bytes":46,"dir":1,"interval":1},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":331,"dir":1,"interval":0},{"bytes":32,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"accounts.google.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52111,"dip":"182.61.200.5","dport":443,"proto":"tcp","c2s_bytes":4210,"s2c_bytes":37579,"c2s_pkts":5,"s2c_pkts":36,"total_pkts":41,"duration":31049,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1137,"dir":1,"interval":231},{"bytes":1460,"dir":2,"interval":79},{"bytes":1460,"dir":2,"interval":0},{"bytes":380,"dir":2,"interval":0},{"bytes":1261,"dir":1,"interval":524},{"bytes":867,"dir":2,"interval":524},{"bytes":1264,"dir":1,"interval":11},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":267,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30280}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52141,"dip":"111.206.37.54","dport":443,"proto":"tcp","c2s_bytes":14254,"s2c_bytes":6657,"c2s_pkts":15,"s2c_pkts":13,"total_pkts":28,"duration":28472,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1248,"dir":1,"interval":111},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":1041,"dir":1,"interval":0},{"bytes":814,"dir":2,"interval":43},{"bytes":1452,"dir":1,"interval":1922},{"bytes":596,"dir":1,"interval":0},{"bytes":424,"dir":1,"interval":0},{"bytes":418,"dir":2,"interval":1919},{"bytes":1330,"dir":1,"interval":701},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":1041,"dir":1,"interval":0},{"bytes":814,"dir":2,"interval":704},{"bytes":1452,"dir":1,"interval":2036},{"bytes":596,"dir":1,"interval":0},{"bytes":461,"dir":1,"interval":0},{"bytes":418,"dir":2,"interval":2034}],"tls":{"version":"tls1.2","sni":"anti-bot.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52162,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":9857,"s2c_bytes":204532,"c2s_pkts":20,"s2c_pkts":154,"total_pkts":174,"duration":11171,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":481,"dir":1,"interval":834},{"bytes":1448,"dir":2,"interval":68},{"bytes":1448,"dir":2,"interval":0},{"bytes":843,"dir":2,"interval":0},{"bytes":480,"dir":1,"interval":159},{"bytes":1448,"dir":2,"interval":160},{"bytes":1448,"dir":2,"interval":0},{"bytes":1039,"dir":2,"interval":0},{"bytes":478,"dir":1,"interval":18},{"bytes":1448,"dir":2,"interval":16},{"bytes":1023,"dir":2,"interval":0},{"bytes":480,"dir":1,"interval":12},{"bytes":1448,"dir":2,"interval":11},{"bytes":769,"dir":2,"interval":0},{"bytes":477,"dir":1,"interval":17},{"bytes":1448,"dir":2,"interval":17},{"bytes":60,"dir":2,"interval":0},{"bytes":492,"dir":1,"interval":791},{"bytes":1448,"dir":2,"interval":791},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":397,"dir":2,"interval":0},{"bytes":488,"dir":1,"interval":91},{"bytes":1448,"dir":2,"interval":88},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":306,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":153},{"bytes":1448,"dir":2,"interval":152},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":54},{"bytes":1448,"dir":2,"interval":52},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1253,"dir":2,"interval":0},{"bytes":492,"dir":1,"interval":27},{"bytes":1448,"dir":2,"interval":27},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1201,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":58},{"bytes":1448,"dir":2,"interval":55},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":56},{"bytes":1448,"dir":2,"interval":55},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":8,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":139},{"bytes":1448,"dir":2,"interval":137},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":493,"dir":2,"interval":0},{"bytes":499,"dir":1,"interval":137},{"bytes":1448,"dir":2,"interval":135},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":972,"dir":2,"interval":0},{"bytes":499,"dir":1,"interval":131},{"bytes":1448,"dir":2,"interval":126},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":609,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":1177},{"bytes":1448,"dir":2,"interval":1176},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":217,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":56},{"bytes":1448,"dir":2,"interval":56},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":1169},{"bytes":1448,"dir":2,"interval":1169},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1085,"dir":2,"interval":0},{"bytes":478,"dir":1,"interval":3084},{"bytes":1448,"dir":2,"interval":3078},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1405,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52151,"dip":"182.61.62.40","dport":443,"proto":"tcp","c2s_bytes":6492,"s2c_bytes":4744,"c2s_pkts":6,"s2c_pkts":10,"total_pkts":16,"duration":21908,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":38},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":742},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":22},{"bytes":167,"dir":1,"interval":0},{"bytes":551,"dir":2,"interval":141}],"tls":{"version":"tls1.2","sni":"als.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52126,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":4057,"s2c_bytes":5171,"c2s_pkts":5,"s2c_pkts":10,"total_pkts":15,"duration":30151,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":143},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":40,"dir":1,"interval":0},{"bytes":978,"dir":2,"interval":60}],"tls":{"version":"tls1.2","sni":"boxer.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52119,"dip":"182.61.200.5","dport":443,"proto":"tcp","c2s_bytes":3739,"s2c_bytes":11409,"c2s_pkts":5,"s2c_pkts":18,"total_pkts":23,"duration":31686,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":160},{"bytes":114,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":90},{"bytes":1460,"dir":2,"interval":0},{"bytes":593,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1440},{"bytes":204,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1440},{"bytes":1460,"dir":2,"interval":0},{"bytes":115,"dir":2,"interval":0},{"bytes":513,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"feed.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52132,"dip":"182.61.128.198","dport":443,"proto":"tcp","c2s_bytes":1489,"s2c_bytes":15706,"c2s_pkts":4,"s2c_pkts":16,"total_pkts":20,"duration":30510,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":76,"dir":2,"interval":0},{"bytes":100,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":4},{"bytes":303,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":84},{"bytes":58,"dir":1,"interval":13},{"bytes":391,"dir":1,"interval":0},{"bytes":1340,"dir":2,"interval":20},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":1340,"dir":2,"interval":0},{"bytes":184,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbdp02.bdstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52159,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":916,"s2c_bytes":6413,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":12650,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":399,"dir":1,"interval":1390},{"bytes":1448,"dir":2,"interval":48},{"bytes":835,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"misc.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52143,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":6122,"s2c_bytes":5071,"c2s_pkts":8,"s2c_pkts":12,"total_pkts":20,"duration":29756,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":423},{"bytes":596,"dir":1,"interval":0},{"bytes":272,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":215},{"bytes":1226,"dir":1,"interval":94},{"bytes":213,"dir":2,"interval":84},{"bytes":1452,"dir":1,"interval":5702},{"bytes":596,"dir":1,"interval":1},{"bytes":11,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":5704}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52161,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":9885,"s2c_bytes":226825,"c2s_pkts":20,"s2c_pkts":172,"total_pkts":192,"duration":12643,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":480,"dir":1,"interval":839},{"bytes":1448,"dir":2,"interval":73},{"bytes":1448,"dir":2,"interval":0},{"bytes":627,"dir":2,"interval":0},{"bytes":481,"dir":1,"interval":155},{"bytes":1448,"dir":2,"interval":156},{"bytes":862,"dir":2,"interval":0},{"bytes":480,"dir":1,"interval":21},{"bytes":1448,"dir":2,"interval":20},{"bytes":620,"dir":2,"interval":0},{"bytes":480,"dir":1,"interval":23},{"bytes":1448,"dir":2,"interval":23},{"bytes":4,"dir":2,"interval":0},{"bytes":478,"dir":1,"interval":34},{"bytes":1448,"dir":2,"interval":34},{"bytes":31,"dir":2,"interval":0},{"bytes":490,"dir":1,"interval":758},{"bytes":1448,"dir":2,"interval":758},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1043,"dir":2,"interval":0},{"bytes":489,"dir":1,"interval":37},{"bytes":1448,"dir":2,"interval":34},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1287,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":207},{"bytes":1448,"dir":2,"interval":205},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":892,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":53},{"bytes":1448,"dir":2,"interval":51},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":329,"dir":2,"interval":0},{"bytes":491,"dir":1,"interval":27},{"bytes":1448,"dir":2,"interval":28},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":492,"dir":2,"interval":0},{"bytes":506,"dir":1,"interval":66},{"bytes":1448,"dir":2,"interval":62},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1251,"dir":2,"interval":0},{"bytes":499,"dir":1,"interval":189},{"bytes":1448,"dir":2,"interval":181},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":522,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":137},{"bytes":1448,"dir":2,"interval":135},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":7,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":120},{"bytes":1448,"dir":2,"interval":115},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":7,"dir":2,"interval":0},{"bytes":501,"dir":1,"interval":931},{"bytes":1448,"dir":2,"interval":929},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":484,"dir":2,"interval":0},{"bytes":505,"dir":1,"interval":106},{"bytes":1448,"dir":2,"interval":106},{"bytes":1448,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":60},{"bytes":1448,"dir":2,"interval":59},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1277,"dir":2,"interval":0},{"bytes":494,"dir":1,"interval":93},{"bytes":1448,"dir":2,"interval":93},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":390,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":1221},{"bytes":1448,"dir":2,"interval":1219},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":314,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52142,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":7466,"s2c_bytes":5411,"c2s_pkts":8,"s2c_pkts":13,"total_pkts":21,"duration":29756,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":423},{"bytes":396,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":219},{"bytes":1226,"dir":1,"interval":94},{"bytes":213,"dir":2,"interval":81},{"bytes":1452,"dir":1,"interval":5701},{"bytes":415,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":5707},{"bytes":1452,"dir":1,"interval":170},{"bytes":556,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":167}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52158,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":950,"s2c_bytes":38310,"c2s_pkts":2,"s2c_pkts":28,"total_pkts":30,"duration":12654,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":433,"dir":1,"interval":674},{"bytes":1448,"dir":2,"interval":368},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":876,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"misc.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52109,"dip":"182.61.200.5","dport":443,"proto":"tcp","c2s_bytes":13310,"s2c_bytes":108125,"c2s_pkts":14,"s2c_pkts":102,"total_pkts":116,"duration":32770,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1132,"dir":1,"interval":171},{"bytes":1460,"dir":2,"interval":85},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":200,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":758,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":405,"dir":2,"interval":0},{"bytes":1261,"dir":1,"interval":91},{"bytes":472,"dir":2,"interval":95},{"bytes":1261,"dir":1,"interval":523},{"bytes":1460,"dir":2,"interval":515},{"bytes":795,"dir":2,"interval":0},{"bytes":1260,"dir":1,"interval":11},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":0},{"bytes":1324,"dir":1,"interval":581},{"bytes":1460,"dir":2,"interval":966},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":923,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":155,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":260,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1030,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":160,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":18,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":109,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":321,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":478},{"bytes":43,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":151},{"bytes":1452,"dir":1,"interval":3189},{"bytes":244,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":3133},{"bytes":1452,"dir":1,"interval":873},{"bytes":213,"dir":1,"interval":0},{"bytes":378,"dir":2,"interval":869},{"bytes":1452,"dir":1,"interval":968},{"bytes":247,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":970}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52140,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":31727,"s2c_bytes":9211,"c2s_pkts":36,"s2c_pkts":26,"total_pkts":62,"duration":30091,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":272},{"bytes":596,"dir":1,"interval":0},{"bytes":351,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":35},{"bytes":1452,"dir":1,"interval":48},{"bytes":205,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":54},{"bytes":1452,"dir":1,"interval":49},{"bytes":420,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":41},{"bytes":1452,"dir":1,"interval":48},{"bytes":331,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":47},{"bytes":1226,"dir":1,"interval":163},{"bytes":213,"dir":2,"interval":170},{"bytes":1226,"dir":1,"interval":142},{"bytes":213,"dir":2,"interval":169},{"bytes":1226,"dir":1,"interval":119},{"bytes":213,"dir":2,"interval":90},{"bytes":1226,"dir":1,"interval":94},{"bytes":213,"dir":2,"interval":96},{"bytes":1452,"dir":1,"interval":490},{"bytes":453,"dir":1,"interval":0},{"bytes":213,"dir":2,"interval":501},{"bytes":1452,"dir":1,"interval":1211},{"bytes":364,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":1194},{"bytes":1452,"dir":1,"interval":143},{"bytes":596,"dir":1,"interval":0},{"bytes":388,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":143},{"bytes":1452,"dir":1,"interval":111},{"bytes":596,"dir":1,"interval":0},{"bytes":309,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":117},{"bytes":1452,"dir":1,"interval":70},{"bytes":368,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":83},{"bytes":1452,"dir":1,"interval":1273},{"bytes":491,"dir":1,"interval":0},{"bytes":213,"dir":2,"interval":1255},{"bytes":1452,"dir":1,"interval":1839},{"bytes":385,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":1841},{"bytes":1452,"dir":1,"interval":471},{"bytes":596,"dir":1,"interval":0},{"bytes":328,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":472},{"bytes":1452,"dir":1,"interval":165},{"bytes":596,"dir":1,"interval":0},{"bytes":57,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":181}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52168,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1415,"s2c_bytes":65230,"c2s_pkts":3,"s2c_pkts":47,"total_pkts":50,"duration":10215,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":421,"dir":1,"interval":514},{"bytes":1448,"dir":2,"interval":217},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1263,"dir":2,"interval":0},{"bytes":477,"dir":1,"interval":305},{"bytes":1448,"dir":2,"interval":292},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":469,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52157,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":937,"s2c_bytes":15655,"c2s_pkts":2,"s2c_pkts":12,"total_pkts":14,"duration":11900,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":420,"dir":1,"interval":642},{"bytes":1448,"dir":2,"interval":52},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1389,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"misc.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52139,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":6461,"s2c_bytes":18097,"c2s_pkts":7,"s2c_pkts":27,"total_pkts":34,"duration":30091,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1214,"dir":1,"interval":207},{"bytes":1102,"dir":2,"interval":173},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":197},{"bytes":518,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":232},{"bytes":85,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1251,"dir":1,"interval":2378},{"bytes":1102,"dir":2,"interval":2342},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":115},{"bytes":57,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":315},{"bytes":108,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":253,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52174,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":966,"s2c_bytes":25904,"c2s_pkts":2,"s2c_pkts":20,"total_pkts":22,"duration":9167,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":449,"dir":1,"interval":440},{"bytes":1448,"dir":2,"interval":138},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"st.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52186,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1462,"s2c_bytes":193137,"c2s_pkts":2,"s2c_pkts":137,"total_pkts":139,"duration":6245,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":945,"dir":1,"interval":1117},{"bytes":1448,"dir":2,"interval":927},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":492,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":253,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wqimg.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52177,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":965,"s2c_bytes":5094,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":9167,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":385},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":265,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":86},{"bytes":845,"dir":2,"interval":13}],"tls":{"version":"tls1.2","sni":"mapi.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52176,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":2239,"s2c_bytes":8321,"c2s_pkts":5,"s2c_pkts":10,"total_pkts":15,"duration":9091,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":837,"dir":1,"interval":301},{"bytes":38,"dir":2,"interval":141},{"bytes":38,"dir":1,"interval":8},{"bytes":1205,"dir":2,"interval":9},{"bytes":1162,"dir":2,"interval":3},{"bytes":379,"dir":1,"interval":102},{"bytes":573,"dir":2,"interval":109},{"bytes":468,"dir":1,"interval":3901},{"bytes":1132,"dir":2,"interval":3902}],"tls":{"version":"tls1.2","sni":"mapi.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52144,"dip":"182.61.200.48","dport":443,"proto":"tcp","c2s_bytes":16359,"s2c_bytes":6730,"c2s_pkts":18,"s2c_pkts":18,"total_pkts":36,"duration":29756,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":423},{"bytes":183,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":209},{"bytes":1226,"dir":1,"interval":94},{"bytes":213,"dir":2,"interval":91},{"bytes":1226,"dir":1,"interval":85},{"bytes":213,"dir":2,"interval":96},{"bytes":1452,"dir":1,"interval":490},{"bytes":453,"dir":1,"interval":0},{"bytes":213,"dir":2,"interval":479},{"bytes":1452,"dir":1,"interval":1354},{"bytes":433,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":1355},{"bytes":1452,"dir":1,"interval":119},{"bytes":457,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":119},{"bytes":1452,"dir":1,"interval":1337},{"bytes":491,"dir":1,"interval":0},{"bytes":213,"dir":2,"interval":1400},{"bytes":1452,"dir":1,"interval":1839},{"bytes":556,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":1831},{"bytes":1452,"dir":1,"interval":635},{"bytes":596,"dir":1,"interval":0},{"bytes":57,"dir":1,"interval":0},{"bytes":340,"dir":2,"interval":582}],"tls":{"version":"tls1.2","sni":"hpd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52175,"dip":"211.144.24.235","dport":443,"proto":"tcp","c2s_bytes":1749,"s2c_bytes":27743,"c2s_pkts":7,"s2c_pkts":23,"total_pkts":30,"duration":9168,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":487},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":580,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":408},{"bytes":1460,"dir":2,"interval":146},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1441,"dir":2,"interval":0},{"bytes":469,"dir":1,"interval":2180},{"bytes":1460,"dir":2,"interval":2250},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":153,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wqcoss.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52180,"dip":"211.144.24.122","dport":443,"proto":"tcp","c2s_bytes":2700,"s2c_bytes":4469,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":8373,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":432},{"bytes":50,"dir":1,"interval":-4},{"bytes":1181,"dir":1,"interval":4},{"bytes":38,"dir":2,"interval":66},{"bytes":110,"dir":2,"interval":6},{"bytes":899,"dir":1,"interval":1750},{"bytes":110,"dir":2,"interval":1744}],"tls":{"version":"tls1.2","sni":"knicks.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52152,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":894,"s2c_bytes":28862,"c2s_pkts":2,"s2c_pkts":22,"total_pkts":24,"duration":13422,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":377,"dir":1,"interval":305},{"bytes":1448,"dir":2,"interval":49},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":101,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"www.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52185,"dip":"211.144.24.241","dport":443,"proto":"tcp","c2s_bytes":2900,"s2c_bytes":5781,"c2s_pkts":15,"s2c_pkts":17,"total_pkts":32,"duration":6487,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1094,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":4},{"bytes":287,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":95},{"bytes":58,"dir":1,"interval":18},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":585,"dir":1,"interval":0},{"bytes":391,"dir":1,"interval":0},{"bytes":67,"dir":1,"interval":0},{"bytes":66,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":44},{"bytes":110,"dir":2,"interval":5},{"bytes":110,"dir":2,"interval":0},{"bytes":110,"dir":2,"interval":0},{"bytes":110,"dir":2,"interval":0},{"bytes":67,"dir":1,"interval":67},{"bytes":68,"dir":1,"interval":0},{"bytes":110,"dir":2,"interval":61},{"bytes":336,"dir":1,"interval":4},{"bytes":110,"dir":2,"interval":4},{"bytes":110,"dir":2,"interval":5},{"bytes":110,"dir":2,"interval":0},{"bytes":110,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":105},{"bytes":67,"dir":1,"interval":128},{"bytes":110,"dir":2,"interval":229}],"tls":{"version":"tls1.2","sni":"sh.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52163,"dip":"211.144.24.232","dport":443,"proto":"tcp","c2s_bytes":993,"s2c_bytes":57071,"c2s_pkts":7,"s2c_pkts":43,"total_pkts":50,"duration":11205,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":167},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":251,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":109},{"bytes":1460,"dir":2,"interval":165},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":262,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":220}],"tls":{"version":"tls1.2","sni":"m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52167,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":945,"s2c_bytes":110686,"c2s_pkts":2,"s2c_pkts":79,"total_pkts":81,"duration":10216,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":428,"dir":1,"interval":514},{"bytes":1448,"dir":2,"interval":216},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":436,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52130,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":7894,"s2c_bytes":47782,"c2s_pkts":8,"s2c_pkts":56,"total_pkts":64,"duration":30846,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1221,"dir":1,"interval":127},{"bytes":1460,"dir":2,"interval":100},{"bytes":1460,"dir":2,"interval":0},{"bytes":49,"dir":2,"interval":0},{"bytes":548,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":741,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":295,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":273,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":12,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1225,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1320,"dir":1,"interval":610},{"bytes":1460,"dir":2,"interval":561},{"bytes":652,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":174},{"bytes":20,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":373},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1181,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":300,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1357,"dir":1,"interval":2625},{"bytes":1460,"dir":2,"interval":2428},{"bytes":651,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":2},{"bytes":1452,"dir":1,"interval":103},{"bytes":555,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":75},{"bytes":85,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52112,"dip":"182.61.200.5","dport":443,"proto":"tcp","c2s_bytes":6443,"s2c_bytes":23234,"c2s_pkts":7,"s2c_pkts":25,"total_pkts":32,"duration":32743,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":175,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1126,"dir":1,"interval":220},{"bytes":1460,"dir":2,"interval":84},{"bytes":1460,"dir":2,"interval":0},{"bytes":1109,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1310,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":206,"dir":2,"interval":0},{"bytes":1262,"dir":1,"interval":538},{"bytes":1460,"dir":2,"interval":537},{"bytes":1447,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1074},{"bytes":334,"dir":1,"interval":0},{"bytes":1253,"dir":2,"interval":1077},{"bytes":1452,"dir":1,"interval":3230},{"bytes":300,"dir":1,"interval":0},{"bytes":379,"dir":2,"interval":3236}],"tls":{"version":"tls1.2","sni":"m.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52164,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":5061,"s2c_bytes":87523,"c2s_pkts":12,"s2c_pkts":66,"total_pkts":78,"duration":10806,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":393,"dir":1,"interval":525},{"bytes":1448,"dir":2,"interval":197},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":202},{"bytes":1448,"dir":2,"interval":199},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1148,"dir":2,"interval":0},{"bytes":403,"dir":1,"interval":152},{"bytes":1448,"dir":2,"interval":149},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1354,"dir":2,"interval":0},{"bytes":402,"dir":1,"interval":51},{"bytes":1448,"dir":2,"interval":50},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":123,"dir":2,"interval":0},{"bytes":417,"dir":1,"interval":162},{"bytes":1448,"dir":2,"interval":161},{"bytes":1448,"dir":2,"interval":0},{"bytes":933,"dir":2,"interval":0},{"bytes":399,"dir":1,"interval":15},{"bytes":1448,"dir":2,"interval":15},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1403,"dir":2,"interval":0},{"bytes":468,"dir":1,"interval":300},{"bytes":1448,"dir":2,"interval":300},{"bytes":740,"dir":2,"interval":0},{"bytes":409,"dir":1,"interval":229},{"bytes":1448,"dir":2,"interval":228},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":766,"dir":2,"interval":0},{"bytes":415,"dir":1,"interval":488},{"bytes":1221,"dir":2,"interval":488},{"bytes":404,"dir":1,"interval":914},{"bytes":1448,"dir":2,"interval":914},{"bytes":266,"dir":2,"interval":0},{"bytes":429,"dir":1,"interval":2987},{"bytes":1448,"dir":2,"interval":2987},{"bytes":595,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52138,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":3314,"s2c_bytes":9691,"c2s_pkts":3,"s2c_pkts":16,"total_pkts":19,"duration":30092,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1380,"dir":1,"interval":207},{"bytes":1460,"dir":2,"interval":283},{"bytes":109,"dir":2,"interval":0},{"bytes":1171,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1417,"dir":1,"interval":2575},{"bytes":1460,"dir":2,"interval":2556},{"bytes":1245,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52178,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1362,"s2c_bytes":5155,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":8417,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":49},{"bytes":258,"dir":2,"interval":5},{"bytes":845,"dir":1,"interval":338},{"bytes":1010,"dir":2,"interval":25}],"tls":{"version":"tls1.2","sni":"wqs.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52148,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":4053,"s2c_bytes":9132,"c2s_pkts":5,"s2c_pkts":17,"total_pkts":22,"duration":29424,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":333},{"bytes":263,"dir":1,"interval":0},{"bytes":673,"dir":2,"interval":124},{"bytes":1460,"dir":2,"interval":0},{"bytes":314,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1928},{"bytes":369,"dir":1,"interval":0},{"bytes":648,"dir":2,"interval":1924},{"bytes":1460,"dir":2,"interval":0},{"bytes":316,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ext.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52156,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1224,"s2c_bytes":48537,"c2s_pkts":3,"s2c_pkts":36,"total_pkts":39,"duration":13040,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":351,"dir":1,"interval":1178},{"bytes":1448,"dir":2,"interval":880},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":95,"dir":2,"interval":0},{"bytes":356,"dir":1,"interval":1063},{"bytes":1448,"dir":2,"interval":1062},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":857,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wl.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52169,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1804,"s2c_bytes":28116,"c2s_pkts":4,"s2c_pkts":22,"total_pkts":26,"duration":10217,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":426,"dir":1,"interval":638},{"bytes":1448,"dir":2,"interval":387},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":153,"dir":2,"interval":0},{"bytes":471,"dir":1,"interval":180},{"bytes":1448,"dir":2,"interval":180},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1087,"dir":2,"interval":0},{"bytes":390,"dir":1,"interval":229},{"bytes":1448,"dir":2,"interval":227},{"bytes":1026,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52165,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1448,"s2c_bytes":27124,"c2s_pkts":3,"s2c_pkts":22,"total_pkts":25,"duration":10807,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":427,"dir":1,"interval":525},{"bytes":1448,"dir":2,"interval":195},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":0},{"bytes":504,"dir":1,"interval":1344},{"bytes":1448,"dir":2,"interval":1341},{"bytes":1448,"dir":2,"interval":0},{"bytes":476,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52173,"dip":"211.144.24.235","dport":443,"proto":"tcp","c2s_bytes":3743,"s2c_bytes":5883,"c2s_pkts":10,"s2c_pkts":11,"total_pkts":21,"duration":9169,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":103},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":549,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":20},{"bytes":38,"dir":1,"interval":4},{"bytes":567,"dir":2,"interval":31},{"bytes":418,"dir":1,"interval":380},{"bytes":371,"dir":2,"interval":360},{"bytes":613,"dir":1,"interval":519},{"bytes":232,"dir":2,"interval":517},{"bytes":964,"dir":1,"interval":496},{"bytes":232,"dir":2,"interval":494},{"bytes":499,"dir":1,"interval":2470},{"bytes":232,"dir":2,"interval":2470}],"tls":{"version":"tls1.2","sni":"wq.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52170,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":997,"s2c_bytes":57733,"c2s_pkts":2,"s2c_pkts":42,"total_pkts":44,"duration":10094,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":480,"dir":1,"interval":642},{"bytes":1448,"dir":2,"interval":108},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":27,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52154,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1347,"s2c_bytes":162230,"c2s_pkts":3,"s2c_pkts":115,"total_pkts":118,"duration":13046,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":427,"dir":1,"interval":368},{"bytes":1448,"dir":2,"interval":152},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":438,"dir":2,"interval":0},{"bytes":403,"dir":1,"interval":389},{"bytes":1448,"dir":2,"interval":301},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1032,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1263,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"misc.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52188,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1492,"s2c_bytes":59705,"c2s_pkts":2,"s2c_pkts":43,"total_pkts":45,"duration":3159,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":975,"dir":1,"interval":394},{"bytes":1448,"dir":2,"interval":75},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":536,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"imgcps.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52171,"dip":"211.144.24.64","dport":443,"proto":"tcp","c2s_bytes":44782,"s2c_bytes":12599,"c2s_pkts":65,"s2c_pkts":70,"total_pkts":135,"duration":9090,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":284},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":255,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":136,"dir":1,"interval":0},{"bytes":1219,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":118},{"bytes":68,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":3},{"bytes":1460,"dir":1,"interval":19},{"bytes":207,"dir":2,"interval":12},{"bytes":38,"dir":1,"interval":3},{"bytes":207,"dir":2,"interval":6},{"bytes":72,"dir":1,"interval":103},{"bytes":1210,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":103},{"bytes":207,"dir":2,"interval":6},{"bytes":72,"dir":1,"interval":16},{"bytes":1184,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":8},{"bytes":207,"dir":2,"interval":15},{"bytes":1295,"dir":1,"interval":263},{"bytes":42,"dir":2,"interval":248},{"bytes":207,"dir":2,"interval":4},{"bytes":72,"dir":1,"interval":616},{"bytes":42,"dir":2,"interval":611},{"bytes":1217,"dir":1,"interval":7},{"bytes":72,"dir":1,"interval":0},{"bytes":1217,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1288,"dir":1,"interval":0},{"bytes":55,"dir":2,"interval":8},{"bytes":207,"dir":2,"interval":3},{"bytes":207,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":3},{"bytes":72,"dir":1,"interval":94},{"bytes":1223,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":86},{"bytes":207,"dir":2,"interval":3},{"bytes":72,"dir":1,"interval":181},{"bytes":1216,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1216,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":178},{"bytes":42,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":2},{"bytes":72,"dir":1,"interval":129},{"bytes":1216,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":126},{"bytes":72,"dir":1,"interval":3},{"bytes":1216,"dir":1,"interval":0},{"bytes":207,"dir":2,"interval":7},{"bytes":42,"dir":2,"interval":3},{"bytes":207,"dir":2,"interval":1},{"bytes":72,"dir":1,"interval":140},{"bytes":1216,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":132},{"bytes":72,"dir":1,"interval":3},{"bytes":1216,"dir":1,"interval":0},{"bytes":207,"dir":2,"interval":6},{"bytes":42,"dir":2,"interval":3},{"bytes":207,"dir":2,"interval":3},{"bytes":1216,"dir":1,"interval":54},{"bytes":42,"dir":2,"interval":44},{"bytes":207,"dir":2,"interval":6},{"bytes":1216,"dir":1,"interval":25},{"bytes":42,"dir":2,"interval":18},{"bytes":207,"dir":2,"interval":6},{"bytes":1216,"dir":1,"interval":54},{"bytes":72,"dir":1,"interval":0},{"bytes":1216,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":47},{"bytes":42,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":5},{"bytes":1216,"dir":1,"interval":200},{"bytes":72,"dir":1,"interval":0},{"bytes":1216,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1216,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1216,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1216,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1216,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":193},{"bytes":42,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":0},{"bytes":55,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":1},{"bytes":207,"dir":2,"interval":1},{"bytes":207,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":1},{"bytes":1216,"dir":1,"interval":204},{"bytes":72,"dir":1,"interval":0},{"bytes":1216,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":198},{"bytes":42,"dir":2,"interval":1},{"bytes":207,"dir":2,"interval":3},{"bytes":207,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":80},{"bytes":1217,"dir":1,"interval":90},{"bytes":72,"dir":1,"interval":0},{"bytes":1217,"dir":1,"interval":0},{"bytes":207,"dir":2,"interval":10},{"bytes":42,"dir":2,"interval":3},{"bytes":207,"dir":2,"interval":1},{"bytes":42,"dir":2,"interval":77},{"bytes":1217,"dir":1,"interval":88},{"bytes":72,"dir":1,"interval":0},{"bytes":1217,"dir":1,"interval":0},{"bytes":207,"dir":2,"interval":6},{"bytes":42,"dir":2,"interval":3},{"bytes":207,"dir":2,"interval":1},{"bytes":1217,"dir":1,"interval":433},{"bytes":72,"dir":1,"interval":0},{"bytes":1217,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":424},{"bytes":42,"dir":2,"interval":1},{"bytes":207,"dir":2,"interval":0},{"bytes":207,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"uranus.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52187,"dip":"172.217.24.10","dport":443,"proto":"tcp","c2s_bytes":1699,"s2c_bytes":3931,"c2s_pkts":8,"s2c_pkts":4,"total_pkts":12,"duration":10268,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":451,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":202},{"bytes":58,"dir":1,"interval":29},{"bytes":46,"dir":1,"interval":1},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":157,"dir":1,"interval":7},{"bytes":320,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"play.googleapis.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49912,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":3685,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":6,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49908,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":7,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49910,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":8,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49911,"dip":"153.37.235.27","dport":443,"proto":"tcp","c2s_bytes":198,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":131,"packets":[{"bytes":198,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":11},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bdbus-turbonet.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49916,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":191,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":658,"packets":[{"bytes":191,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49915,"dip":"182.61.240.23","dport":443,"proto":"tcp","c2s_bytes":1401,"s2c_bytes":3370,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":1069,"packets":[{"bytes":174,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":264,"dir":2,"interval":0},{"bytes":186,"dir":2,"interval":26},{"bytes":51,"dir":1,"interval":848},{"bytes":1145,"dir":1,"interval":216},{"bytes":31,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"pimc.baidu.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":49925,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":197,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":305,"packets":[{"bytes":197,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49923,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1001,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49913,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1150,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49914,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1150,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49926,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":330,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49919,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1750,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49920,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1766,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":12},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49918,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":189,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1210,"packets":[{"bytes":189,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49927,"dip":"182.61.200.159","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":55,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tcbox.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49921,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2187,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49928,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":187,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":56,"packets":[{"bytes":187,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49929,"dip":"182.61.200.239","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":54,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mbd.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":49922,"dip":"153.37.235.27","dport":443,"proto":"tcp","c2s_bytes":204,"s2c_bytes":4032,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2280,"packets":[{"bytes":204,"dir":1,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":4},{"bytes":9,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bdbus-turbonet.baidu.com","alpn":"\u0002h2\bspdy/3.1\bahfs/1.0\bhttp/1.1","cipher_suites":["c02b","c02f","009e","c02c","c030","c009","c013","0033","c00a","c014","0039","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,16,11,10]}}
{"sip":"192.168.50.193","sport":52195,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":36,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":12},{"bytes":69,"dir":2,"interval":11}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52206,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":37,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":11},{"bytes":69,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52204,"dip":"120.52.148.55","dport":443,"proto":"tcp","c2s_bytes":1481,"s2c_bytes":4508,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":2068,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":635,"dir":1,"interval":2011},{"bytes":329,"dir":1,"interval":0},{"bytes":360,"dir":2,"interval":729}],"tls":{"version":"tls1.2","sni":"eid.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52210,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":833,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52214,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":42,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":11},{"bytes":69,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52203,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":3381,"s2c_bytes":267572,"c2s_pkts":9,"s2c_pkts":191,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":379,"dir":1,"interval":2023},{"bytes":1448,"dir":2,"interval":679},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1417,"dir":2,"interval":0},{"bytes":377,"dir":1,"interval":2202},{"bytes":1448,"dir":2,"interval":2207},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":524,"dir":2,"interval":0},{"bytes":360,"dir":1,"interval":51},{"bytes":1448,"dir":2,"interval":42},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1421,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":20},{"bytes":1448,"dir":2,"interval":18},{"bytes":1448,"dir":2,"interval":0},{"bytes":263,"dir":2,"interval":0},{"bytes":360,"dir":1,"interval":11},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":191,"dir":2,"interval":0},{"bytes":340,"dir":1,"interval":23},{"bytes":1448,"dir":2,"interval":23},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":517,"dir":2,"interval":0},{"bytes":352,"dir":1,"interval":84},{"bytes":1448,"dir":2,"interval":73},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1343,"dir":2,"interval":0},{"bytes":345,"dir":1,"interval":114},{"bytes":1448,"dir":2,"interval":108},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52218,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":374,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52223,"dip":"58.83.230.158","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3887,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":334,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":616,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":11},{"bytes":69,"dir":2,"interval":12}],"tls":{"version":"tls1.2","sni":"58.83.230.158","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52212,"dip":"211.144.24.152","dport":443,"proto":"tcp","c2s_bytes":955,"s2c_bytes":5022,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":1646,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":438,"dir":1,"interval":1630},{"bytes":843,"dir":2,"interval":114},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dns.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52229,"dip":"211.144.24.152","dport":443,"proto":"tcp","c2s_bytes":974,"s2c_bytes":4469,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":239,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":955,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":457,"dir":1,"interval":230},{"bytes":305,"dir":2,"interval":39},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dns.jd.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52192,"dip":"172.217.160.109","dport":443,"proto":"tcp","c2s_bytes":1760,"s2c_bytes":3060,"c2s_pkts":8,"s2c_pkts":3,"total_pkts":11,"duration":10229,"packets":[{"bytes":588,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":0},{"bytes":627,"dir":1,"interval":255},{"bytes":58,"dir":1,"interval":68},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":331,"dir":1,"interval":0},{"bytes":32,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"accounts.google.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52231,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":56,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52230,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":266,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52232,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":221,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52233,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":248,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52234,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":247,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52235,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":242,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52236,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":267,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52237,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":248,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52238,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":218,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52239,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":220,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52240,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":217,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":-11},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":16}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52241,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":183,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":12}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52242,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":163,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52243,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":152,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52244,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":177,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52245,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4073,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":149,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":919,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"220.194.105.131","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52246,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":64,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52247,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":106,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52249,"dip":"221.204.13.129","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4204,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":210,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"221.204.13.129","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52250,"dip":"119.188.142.1","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4204,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":277,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"119.188.142.1","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52251,"dip":"221.204.13.129","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4204,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":374,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"221.204.13.129","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52252,"dip":"119.188.142.1","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4204,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":375,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":18},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"119.188.142.1","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52255,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":72,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52256,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":55,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52254,"dip":"119.188.142.1","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4204,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":196,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"119.188.142.1","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52253,"dip":"221.204.13.129","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4204,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":202,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"221.204.13.129","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49906,"dip":"172.217.160.78","dport":443,"proto":"tcp","c2s_bytes":1566,"s2c_bytes":3798,"c2s_pkts":5,"s2c_pkts":4,"total_pkts":9,"duration":10189,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":318,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":308},{"bytes":58,"dir":1,"interval":55},{"bytes":86,"dir":1,"interval":1},{"bytes":382,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"clients1.google.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["1301","1302","1303","c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[0,23,65281,10,11,35,16,5,13,18,51,45,43,27,21]}}
{"sip":"192.168.50.193","sport":52216,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":2583,"s2c_bytes":271717,"c2s_pkts":7,"s2c_pkts":193,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":347,"dir":1,"interval":1433},{"bytes":1448,"dir":2,"interval":27},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":279,"dir":2,"interval":0},{"bytes":326,"dir":1,"interval":7368},{"bytes":1448,"dir":2,"interval":7350},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":609,"dir":2,"interval":0},{"bytes":326,"dir":1,"interval":36},{"bytes":1448,"dir":2,"interval":36},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":356,"dir":1,"interval":1121},{"bytes":1448,"dir":2,"interval":1109},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":910,"dir":2,"interval":0},{"bytes":356,"dir":1,"interval":1193},{"bytes":1448,"dir":2,"interval":1195},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":355,"dir":1,"interval":550},{"bytes":1448,"dir":2,"interval":548},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49907,"dip":"172.217.160.78","dport":443,"proto":"tcp","c2s_bytes":1202,"s2c_bytes":3799,"c2s_pkts":3,"s2c_pkts":4,"total_pkts":7,"duration":10258,"packets":[{"bytes":555,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":319,"dir":2,"interval":0},{"bytes":589,"dir":1,"interval":286},{"bytes":58,"dir":1,"interval":3}],"tls":{"version":"tls1.2","sni":"clients1.google.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["1301","1302","1303","c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[0,23,65281,10,11,35,16,5,13,18,51,45,43,27,41]}}
{"sip":"192.168.50.193","sport":52248,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3916,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52193,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":33162,"s2c_bytes":97744,"c2s_pkts":49,"s2c_pkts":106,"total_pkts":155,"duration":18853,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":970},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":493,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":85,"dir":1,"interval":0},{"bytes":83,"dir":1,"interval":0},{"bytes":83,"dir":1,"interval":0},{"bytes":83,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":83,"dir":1,"interval":0},{"bytes":86,"dir":1,"interval":0},{"bytes":88,"dir":1,"interval":0},{"bytes":77,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":40,"dir":1,"interval":3},{"bytes":1460,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":914},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":3},{"bytes":224,"dir":2,"interval":4},{"bytes":42,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":2},{"bytes":295,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":562,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":807,"dir":2,"interval":3},{"bytes":1460,"dir":1,"interval":1324},{"bytes":1460,"dir":1,"interval":0},{"bytes":53,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":450,"dir":2,"interval":1321},{"bytes":407,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":162},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1339,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1200,"dir":1,"interval":614},{"bytes":1200,"dir":1,"interval":21},{"bytes":1200,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":-22},{"bytes":1460,"dir":2,"interval":456},{"bytes":868,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":928,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":2},{"bytes":1086,"dir":2,"interval":0},{"bytes":1200,"dir":1,"interval":69},{"bytes":1200,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":30},{"bytes":1207,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":280,"dir":2,"interval":0},{"bytes":1040,"dir":1,"interval":25},{"bytes":82,"dir":1,"interval":2},{"bytes":1200,"dir":1,"interval":1},{"bytes":47,"dir":1,"interval":0},{"bytes":55,"dir":2,"interval":21},{"bytes":250,"dir":2,"interval":3},{"bytes":396,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":178},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":387,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":436},{"bytes":992,"dir":1,"interval":934},{"bytes":235,"dir":2,"interval":312},{"bytes":42,"dir":2,"interval":524},{"bytes":1200,"dir":1,"interval":1245},{"bytes":767,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":6},{"bytes":1200,"dir":1,"interval":0},{"bytes":10,"dir":1,"interval":0},{"bytes":55,"dir":2,"interval":726},{"bytes":338,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":4},{"bytes":338,"dir":2,"interval":1},{"bytes":245,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":277},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":0},{"bytes":674,"dir":1,"interval":569},{"bytes":42,"dir":2,"interval":277},{"bytes":290,"dir":2,"interval":6},{"bytes":848,"dir":1,"interval":4761},{"bytes":42,"dir":2,"interval":4754},{"bytes":1460,"dir":2,"interval":242},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":770,"dir":2,"interval":0},{"bytes":1200,"dir":1,"interval":3084},{"bytes":218,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":2837},{"bytes":1460,"dir":2,"interval":112},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":0},{"bytes":662,"dir":1,"interval":532},{"bytes":42,"dir":2,"interval":419},{"bytes":552,"dir":2,"interval":7},{"bytes":42,"dir":2,"interval":2221},{"bytes":1200,"dir":1,"interval":3463},{"bytes":964,"dir":1,"interval":-687},{"bytes":1460,"dir":2,"interval":1253},{"bytes":1368,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":4},{"bytes":42,"dir":2,"interval":0},{"bytes":354,"dir":2,"interval":14}],"tls":{"version":"tls1.2","sni":"api.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51864,"dip":"110.76.15.173","dport":443,"proto":"tcp","c2s_bytes":1129,"s2c_bytes":6354,"c2s_pkts":9,"s2c_pkts":9,"total_pkts":18,"duration":194910,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1112,"dir":2,"interval":10},{"bytes":258,"dir":2,"interval":39},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":376},{"bytes":53,"dir":1,"interval":16},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":161,"dir":1,"interval":0},{"bytes":111,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":78},{"bytes":42,"dir":2,"interval":37},{"bytes":739,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120875}],"tls":{"version":"tls1.2","sni":"amdc.alipay.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52259,"dip":"211.144.24.78","dport":443,"proto":"tcp","c2s_bytes":2504,"s2c_bytes":4385,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":2220,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":970,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1460,"dir":1,"interval":2215},{"bytes":527,"dir":1,"interval":0},{"bytes":206,"dir":2,"interval":48},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"im-x.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52260,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":98,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52191,"dip":"61.135.186.152","dport":443,"proto":"tcp","c2s_bytes":1646,"s2c_bytes":4542,"c2s_pkts":2,"s2c_pkts":11,"total_pkts":13,"duration":31294,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":2},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1129,"dir":1,"interval":1290},{"bytes":318,"dir":2,"interval":587},{"bytes":31,"dir":2,"interval":29997}],"tls":{"version":"tls1.2","sni":"nsclick.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52190,"dip":"111.202.114.42","dport":443,"proto":"tcp","c2s_bytes":2504,"s2c_bytes":4371,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":31316,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":2},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1095,"dir":1,"interval":1304},{"bytes":892,"dir":1,"interval":4},{"bytes":147,"dir":2,"interval":591},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"hmma.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52262,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3471,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52261,"dip":"211.144.24.78","dport":443,"proto":"tcp","c2s_bytes":2483,"s2c_bytes":4370,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":4922,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":955,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1460,"dir":1,"interval":4915},{"bytes":506,"dir":1,"interval":0},{"bytes":206,"dir":2,"interval":3958},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"im-x.jd.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52263,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":438,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52264,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":416,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49933,"dip":"172.217.24.14","dport":443,"proto":"tcp","c2s_bytes":1670,"s2c_bytes":3798,"c2s_pkts":5,"s2c_pkts":4,"total_pkts":9,"duration":10448,"packets":[{"bytes":555,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":318,"dir":2,"interval":0},{"bytes":589,"dir":1,"interval":512},{"bytes":58,"dir":1,"interval":5},{"bytes":86,"dir":1,"interval":0},{"bytes":382,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"clients1.google.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["1301","1302","1303","c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[0,23,65281,10,11,35,16,5,13,18,51,45,43,27,41]}}
{"sip":"192.168.50.193","sport":52194,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":8206,"s2c_bytes":4304,"c2s_pkts":11,"s2c_pkts":7,"total_pkts":18,"duration":32751,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":982},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":173,"dir":1,"interval":0},{"bytes":71,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":28},{"bytes":55,"dir":2,"interval":3},{"bytes":1460,"dir":1,"interval":1322},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"perf.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52266,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":547,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52222,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1696,"s2c_bytes":4547,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":31872,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":1148,"dir":1,"interval":599},{"bytes":402,"dir":2,"interval":18},{"bytes":31,"dir":1,"interval":31267}],"tls":{"version":"tls1.2","sni":"wl.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52225,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1567,"s2c_bytes":4585,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":31478,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":991,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":1019,"dir":1,"interval":550},{"bytes":440,"dir":2,"interval":26},{"bytes":31,"dir":1,"interval":30924}],"tls":{"version":"tls1.2","sni":"wq.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52267,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":280,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52265,"dip":"35.227.252.169","dport":443,"proto":"tcp","c2s_bytes":232,"s2c_bytes":3247,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":10185,"packets":[{"bytes":232,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1215,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"stats.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":52217,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1932,"s2c_bytes":233611,"c2s_pkts":6,"s2c_pkts":167,"total_pkts":173,"duration":42210,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":351,"dir":1,"interval":1433},{"bytes":1448,"dir":2,"interval":26},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1378,"dir":2,"interval":0},{"bytes":324,"dir":1,"interval":7370},{"bytes":1448,"dir":2,"interval":7357},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1214,"dir":2,"interval":0},{"bytes":465,"dir":2,"interval":0},{"bytes":356,"dir":1,"interval":2349},{"bytes":1448,"dir":2,"interval":2337},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":171,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":549},{"bytes":1448,"dir":2,"interval":547},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1321,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30503}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52215,"dip":"220.194.105.131","dport":443,"proto":"tcp","c2s_bytes":1965,"s2c_bytes":175314,"c2s_pkts":6,"s2c_pkts":125,"total_pkts":131,"duration":43310,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":976,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":378,"dir":1,"interval":1436},{"bytes":1448,"dir":2,"interval":27},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1384,"dir":2,"interval":0},{"bytes":326,"dir":1,"interval":7367},{"bytes":1448,"dir":2,"interval":7365},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1301,"dir":2,"interval":0},{"bytes":356,"dir":1,"interval":2349},{"bytes":1448,"dir":2,"interval":2331},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0},{"bytes":357,"dir":1,"interval":550},{"bytes":1448,"dir":2,"interval":547},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":630,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31603}],"tls":{"version":"tls1.2","sni":"m.360buyimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49909,"dip":"180.76.76.112","dport":443,"proto":"tcp","c2s_bytes":881,"s2c_bytes":7070,"c2s_pkts":3,"s2c_pkts":12,"total_pkts":15,"duration":60018,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1382,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":17},{"bytes":51,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":724},{"bytes":238,"dir":1,"interval":0},{"bytes":1053,"dir":2,"interval":708},{"bytes":1460,"dir":2,"interval":0},{"bytes":646,"dir":2,"interval":0},{"bytes":448,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":59280}],"tls":{"version":"tls1.2","sni":"","alpn":"\u0002h2\bspdy/3.1\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c009","c013","c00a","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,23,35,13,16,11,10,21]}}
{"sip":"192.168.50.193","sport":52269,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":675,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"211.144.24.231","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49936,"dip":"17.57.145.84","dport":443,"proto":"tcp","c2s_bytes":222,"s2c_bytes":3431,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":19813,"packets":[{"bytes":222,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1399,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"courier.push.apple.com","alpn":"\u0010apns-security-v3\fapns-pack-v1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,16,5,18,23]}}
{"sip":"192.168.50.193","sport":52205,"dip":"211.144.24.150","dport":443,"proto":"tcp","c2s_bytes":1124,"s2c_bytes":5097,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":62021,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2012},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":164,"dir":1,"interval":0},{"bytes":260,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":673},{"bytes":42,"dir":2,"interval":5},{"bytes":729,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":17},{"bytes":46,"dir":2,"interval":59998},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ccf.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52197,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":1880,"s2c_bytes":5111,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":62037,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2022},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":486,"dir":1,"interval":0},{"bytes":694,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":672},{"bytes":42,"dir":2,"interval":4},{"bytes":743,"dir":2,"interval":2},{"bytes":38,"dir":1,"interval":18},{"bytes":46,"dir":2,"interval":60001},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"msg.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52196,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":1822,"s2c_bytes":4704,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":62037,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2017},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":487,"dir":1,"interval":0},{"bytes":635,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":673},{"bytes":42,"dir":2,"interval":5},{"bytes":336,"dir":2,"interval":6},{"bytes":46,"dir":2,"interval":60000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cc.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52198,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":1821,"s2c_bytes":4928,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":62039,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2018},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":167,"dir":1,"interval":0},{"bytes":65,"dir":1,"interval":0},{"bytes":490,"dir":1,"interval":0},{"bytes":399,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":676},{"bytes":55,"dir":2,"interval":4},{"bytes":251,"dir":2,"interval":3},{"bytes":296,"dir":2,"interval":7},{"bytes":46,"dir":2,"interval":60000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52201,"dip":"111.13.29.161","dport":443,"proto":"tcp","c2s_bytes":949,"s2c_bytes":5219,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":62047,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2023},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":181,"dir":1,"interval":0},{"bytes":68,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":677},{"bytes":42,"dir":2,"interval":7},{"bytes":851,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":19},{"bytes":46,"dir":2,"interval":60000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"policy.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52199,"dip":"211.144.24.122","dport":443,"proto":"tcp","c2s_bytes":2339,"s2c_bytes":4630,"c2s_pkts":9,"s2c_pkts":12,"total_pkts":21,"duration":62065,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2018},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":165,"dir":1,"interval":0},{"bytes":704,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":675},{"bytes":42,"dir":2,"interval":3},{"bytes":110,"dir":2,"interval":3},{"bytes":62,"dir":1,"interval":36},{"bytes":708,"dir":1,"interval":2},{"bytes":42,"dir":2,"interval":29},{"bytes":110,"dir":2,"interval":5},{"bytes":46,"dir":2,"interval":59999},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"knicks.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52208,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":1792,"s2c_bytes":9090,"c2s_pkts":7,"s2c_pkts":13,"total_pkts":20,"duration":60121,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":99},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":488,"dir":1,"interval":0},{"bytes":604,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":90},{"bytes":42,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":60000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52219,"dip":"120.52.148.150","dport":443,"proto":"tcp","c2s_bytes":1469,"s2c_bytes":4808,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":60112,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":89},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":738,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":37},{"bytes":482,"dir":2,"interval":9},{"bytes":46,"dir":2,"interval":60000},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":60017}],"tls":{"version":"tls1.2","sni":"plogin.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52270,"dip":"124.200.54.26","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1222,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"124.200.54.26","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52220,"dip":"120.52.30.38","dport":443,"proto":"tcp","c2s_bytes":1444,"s2c_bytes":5157,"c2s_pkts":6,"s2c_pkts":9,"total_pkts":15,"duration":60272,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":257},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":744,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":106},{"bytes":38,"dir":1,"interval":9},{"bytes":831,"dir":2,"interval":9},{"bytes":46,"dir":2,"interval":59999},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"eco.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52226,"dip":"211.144.24.64","dport":443,"proto":"tcp","c2s_bytes":6370,"s2c_bytes":4795,"c2s_pkts":11,"s2c_pkts":11,"total_pkts":22,"duration":60186,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":168},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":680,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":588,"dir":1,"interval":0},{"bytes":692,"dir":1,"interval":0},{"bytes":1386,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":29},{"bytes":55,"dir":2,"interval":0},{"bytes":830,"dir":1,"interval":4},{"bytes":207,"dir":2,"interval":6},{"bytes":207,"dir":2,"interval":2},{"bytes":46,"dir":2,"interval":60002},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"uranus.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52211,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":3487,"s2c_bytes":12559,"c2s_pkts":11,"s2c_pkts":17,"total_pkts":28,"duration":62042,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":770},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":827,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":768},{"bytes":365,"dir":1,"interval":17},{"bytes":345,"dir":1,"interval":0},{"bytes":980,"dir":2,"interval":10},{"bytes":880,"dir":2,"interval":9},{"bytes":1001,"dir":2,"interval":6},{"bytes":284,"dir":1,"interval":76},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":0},{"bytes":129,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":2},{"bytes":696,"dir":1,"interval":1144},{"bytes":270,"dir":1,"interval":16},{"bytes":1164,"dir":2,"interval":1153},{"bytes":1121,"dir":2,"interval":12},{"bytes":46,"dir":2,"interval":60000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"un.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52271,"dip":"124.200.54.26","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1220,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"124.200.54.26","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52272,"dip":"124.200.54.26","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4207,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2026,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"124.200.54.26","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52273,"dip":"17.248.161.5","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3665,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1988,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":8},{"bytes":258,"dir":2,"interval":189},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52207,"dip":"120.52.148.150","dport":443,"proto":"tcp","c2s_bytes":11616,"s2c_bytes":4995,"c2s_pkts":17,"s2c_pkts":12,"total_pkts":29,"duration":84650,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2338},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":165,"dir":1,"interval":0},{"bytes":62,"dir":1,"interval":1},{"bytes":59,"dir":1,"interval":0},{"bytes":1293,"dir":1,"interval":0},{"bytes":379,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":41},{"bytes":68,"dir":2,"interval":2},{"bytes":1460,"dir":1,"interval":8},{"bytes":1460,"dir":1,"interval":1},{"bytes":907,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1},{"bytes":1460,"dir":1,"interval":0},{"bytes":159,"dir":2,"interval":7},{"bytes":615,"dir":1,"interval":2},{"bytes":159,"dir":2,"interval":13},{"bytes":159,"dir":2,"interval":7},{"bytes":347,"dir":1,"interval":58930},{"bytes":1287,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":58917},{"bytes":159,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"blackhole.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52282,"dip":"172.217.160.109","dport":443,"proto":"tcp","c2s_bytes":1760,"s2c_bytes":3060,"c2s_pkts":8,"s2c_pkts":3,"total_pkts":11,"duration":10219,"packets":[{"bytes":588,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1028,"dir":2,"interval":0},{"bytes":627,"dir":1,"interval":460},{"bytes":58,"dir":1,"interval":546},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":331,"dir":1,"interval":0},{"bytes":32,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"accounts.google.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":49943,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":817,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":108},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52303,"dip":"112.74.137.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":6551,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":632,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":680,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"112.74.137.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49944,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4345,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":56},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49952,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":332,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49954,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":25,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49947,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4652,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":27},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":3},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49950,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4677,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":55},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49965,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":100,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49962,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":105,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49969,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":98,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49966,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":100,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49963,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":104,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49968,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":99,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49964,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":103,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49971,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":93,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49970,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":97,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49951,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":5481,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":55},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49979,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":74,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49978,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":83,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49975,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":90,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49976,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":87,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49974,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":88,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49977,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":105,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49973,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":110,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49972,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":152,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49949,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":5790,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":55},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49948,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":6131,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":28},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49946,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":6262,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":13}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49945,"dip":"220.194.76.125","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":6296,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":19},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":9},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49986,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":253,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49987,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":260,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49985,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":262,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49984,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":262,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49983,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":272,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49982,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":283,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49980,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":311,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49981,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":310,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49989,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":70,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49990,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":42,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49991,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":48,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49995,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":128,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49992,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":129,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49993,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":129,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49994,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":130,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49996,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":198,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50004,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":77,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49998,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":163,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49999,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":162,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49997,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":163,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50003,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":158,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50001,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":196,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50000,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":196,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50002,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":196,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50008,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":99,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50006,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":99,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50007,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":99,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50005,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":115,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50010,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":100,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50009,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":100,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52200,"dip":"120.52.83.74","dport":443,"proto":"tcp","c2s_bytes":47876,"s2c_bytes":11720,"c2s_pkts":67,"s2c_pkts":58,"total_pkts":125,"duration":106053,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":960,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2017},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":179,"dir":1,"interval":0},{"bytes":62,"dir":1,"interval":0},{"bytes":62,"dir":1,"interval":0},{"bytes":722,"dir":1,"interval":0},{"bytes":1190,"dir":1,"interval":0},{"bytes":574,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":672},{"bytes":68,"dir":2,"interval":1},{"bytes":237,"dir":2,"interval":0},{"bytes":237,"dir":2,"interval":3},{"bytes":237,"dir":2,"interval":4},{"bytes":62,"dir":1,"interval":38},{"bytes":1460,"dir":1,"interval":0},{"bytes":588,"dir":1,"interval":0},{"bytes":562,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":30},{"bytes":237,"dir":2,"interval":5},{"bytes":62,"dir":1,"interval":1449},{"bytes":1460,"dir":1,"interval":0},{"bytes":222,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1444},{"bytes":237,"dir":2,"interval":7},{"bytes":62,"dir":1,"interval":743},{"bytes":1294,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":736},{"bytes":237,"dir":2,"interval":8},{"bytes":62,"dir":1,"interval":417},{"bytes":654,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":408},{"bytes":237,"dir":2,"interval":7},{"bytes":62,"dir":1,"interval":51},{"bytes":654,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":45},{"bytes":237,"dir":2,"interval":6},{"bytes":61,"dir":1,"interval":528},{"bytes":738,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":520},{"bytes":237,"dir":2,"interval":5},{"bytes":349,"dir":1,"interval":2734},{"bytes":758,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":2729},{"bytes":237,"dir":2,"interval":8},{"bytes":63,"dir":1,"interval":4484},{"bytes":1460,"dir":1,"interval":0},{"bytes":578,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":4475},{"bytes":237,"dir":2,"interval":8},{"bytes":63,"dir":1,"interval":27},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":214,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":19},{"bytes":237,"dir":2,"interval":7},{"bytes":63,"dir":1,"interval":481},{"bytes":698,"dir":1,"interval":3},{"bytes":42,"dir":2,"interval":475},{"bytes":237,"dir":2,"interval":5},{"bytes":63,"dir":1,"interval":26},{"bytes":1162,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":24},{"bytes":237,"dir":2,"interval":10},{"bytes":63,"dir":1,"interval":35},{"bytes":42,"dir":2,"interval":25},{"bytes":886,"dir":1,"interval":11},{"bytes":237,"dir":2,"interval":15},{"bytes":1402,"dir":1,"interval":2352},{"bytes":42,"dir":2,"interval":2352},{"bytes":237,"dir":2,"interval":5},{"bytes":1460,"dir":1,"interval":3719},{"bytes":1460,"dir":1,"interval":0},{"bytes":588,"dir":1,"interval":0},{"bytes":1322,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":3713},{"bytes":42,"dir":2,"interval":0},{"bytes":237,"dir":2,"interval":6},{"bytes":237,"dir":2,"interval":3},{"bytes":1200,"dir":1,"interval":7039},{"bytes":1200,"dir":1,"interval":3},{"bytes":1200,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":7026},{"bytes":1200,"dir":1,"interval":2},{"bytes":469,"dir":1,"interval":0},{"bytes":237,"dir":2,"interval":10},{"bytes":1200,"dir":1,"interval":40},{"bytes":848,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":0},{"bytes":690,"dir":1,"interval":1},{"bytes":42,"dir":2,"interval":35},{"bytes":237,"dir":2,"interval":6},{"bytes":1086,"dir":1,"interval":6115},{"bytes":42,"dir":2,"interval":6111},{"bytes":237,"dir":2,"interval":8},{"bytes":1200,"dir":1,"interval":5035},{"bytes":848,"dir":1,"interval":0},{"bytes":1082,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":5026},{"bytes":237,"dir":2,"interval":8},{"bytes":790,"dir":1,"interval":11304},{"bytes":42,"dir":2,"interval":11295},{"bytes":237,"dir":2,"interval":5},{"bytes":934,"dir":1,"interval":12881},{"bytes":42,"dir":2,"interval":12876},{"bytes":237,"dir":2,"interval":5},{"bytes":1200,"dir":1,"interval":2320},{"bytes":42,"dir":2,"interval":2315},{"bytes":81,"dir":1,"interval":907},{"bytes":237,"dir":2,"interval":908},{"bytes":1200,"dir":1,"interval":11003},{"bytes":566,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":11002},{"bytes":237,"dir":2,"interval":7},{"bytes":1158,"dir":1,"interval":190},{"bytes":42,"dir":2,"interval":182},{"bytes":237,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"mars.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50016,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":88,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50017,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":88,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50015,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":88,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50019,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":87,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50014,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":88,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50018,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":89,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50013,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":101,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50012,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":101,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50011,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":159,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52305,"dip":"118.25.31.186","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":6551,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":6038,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1272,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":716,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"118.25.31.186","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50022,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":47,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50021,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":52,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50020,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":65,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52311,"dip":"47.98.19.153","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":6551,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":362,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":680,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":31},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"47.98.19.153","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50024,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":70,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50023,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":73,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52258,"dip":"221.204.13.129","dport":443,"proto":"tcp","c2s_bytes":908,"s2c_bytes":42872,"c2s_pkts":6,"s2c_pkts":33,"total_pkts":39,"duration":95563,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":961,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2422},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":208,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":1216},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":666,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":1476}],"tls":{"version":"tls1.2","sni":"img30.360buyimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52313,"dip":"123.125.114.8","dport":443,"proto":"tcp","c2s_bytes":2542,"s2c_bytes":4340,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":138,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":1095,"dir":1,"interval":99},{"bytes":930,"dir":1,"interval":1},{"bytes":147,"dir":2,"interval":76}],"tls":{"version":"tls1.2","sni":"hmma.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50026,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":147,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50025,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":160,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50028,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":107,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50029,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":111,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50027,"dip":"125.39.11.28","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":112,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50030,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":131,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52297,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":24094,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":9}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52308,"dip":"17.248.161.74","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":20088,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":443,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50031,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":73,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52291,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1055,"s2c_bytes":5805,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31957,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":340},{"bytes":306,"dir":1,"interval":110},{"bytes":75,"dir":1,"interval":1},{"bytes":539,"dir":2,"interval":553},{"bytes":31,"dir":1,"interval":31496}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50033,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":832,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50032,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1738,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50039,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":69,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52307,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1274,"s2c_bytes":5994,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":30354,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":912,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":126},{"bytes":307,"dir":1,"interval":2},{"bytes":293,"dir":1,"interval":0},{"bytes":728,"dir":2,"interval":143},{"bytes":31,"dir":1,"interval":30223}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52293,"dip":"180.163.26.100","dport":443,"proto":"tcp","c2s_bytes":1803,"s2c_bytes":4628,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":34642,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":49},{"bytes":1304,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":50},{"bytes":533,"dir":1,"interval":4287},{"bytes":722,"dir":1,"interval":0},{"bytes":186,"dir":2,"interval":2985},{"bytes":31,"dir":1,"interval":30344}],"tls":{"version":"tls1.2","sni":"ios.bugly.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52298,"dip":"118.25.86.71","dport":443,"proto":"tcp","c2s_bytes":1021,"s2c_bytes":7190,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":34644,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1272,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":1},{"bytes":726,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":4397},{"bytes":347,"dir":1,"interval":8},{"bytes":682,"dir":2,"interval":83},{"bytes":31,"dir":1,"interval":30229}],"tls":{"version":"tls1.2","sni":"configapi.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52310,"dip":"203.119.207.250","dport":443,"proto":"tcp","c2s_bytes":2578,"s2c_bytes":8842,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30161,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":9},{"bytes":73,"dir":2,"interval":0},{"bytes":447,"dir":1,"interval":153},{"bytes":1440,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30046}],"tls":{"version":"tls1.2","sni":"ulogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50040,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":276,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":86,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":64846,"dip":"123.125.106.66","dport":443,"proto":"tcp","c2s_bytes":1513,"s2c_bytes":4653,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":435420,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":869,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":17},{"bytes":258,"dir":2,"interval":16},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":16},{"bytes":56,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":15},{"bytes":38,"dir":1,"interval":9},{"bytes":714,"dir":1,"interval":0},{"bytes":422,"dir":2,"interval":40},{"bytes":46,"dir":2,"interval":180000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api.weibo.cn","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59783,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":739,"s2c_bytes":28963,"c2s_pkts":6,"s2c_pkts":25,"total_pkts":31,"duration":735146,"packets":[{"bytes":142,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1351,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":33},{"bytes":6,"dir":1,"interval":0},{"bytes":53,"dir":1,"interval":0},{"bytes":59,"dir":2,"interval":27},{"bytes":213,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":885,"dir":2,"interval":0},{"bytes":250,"dir":1,"interval":19},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":120000}],"tls":{"version":"tls1.0","sni":"face.t.sinajs.cn","alpn":"","cipher_suites":["c024","c023","c00a","c009","c008","c028","c027","c014","c013","c012","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,5,18,23]}}
{"sip":"192.168.50.193","sport":64196,"dip":"182.254.56.82","dport":443,"proto":"tcp","c2s_bytes":24175,"s2c_bytes":8447,"c2s_pkts":37,"s2c_pkts":20,"total_pkts":57,"duration":459631,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":41},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":39},{"bytes":818,"dir":1,"interval":18},{"bytes":410,"dir":1,"interval":1},{"bytes":273,"dir":2,"interval":99},{"bytes":818,"dir":1,"interval":17839},{"bytes":429,"dir":1,"interval":0},{"bytes":273,"dir":2,"interval":17840},{"bytes":819,"dir":1,"interval":3221},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":196,"dir":1,"interval":0},{"bytes":273,"dir":2,"interval":3226},{"bytes":818,"dir":1,"interval":9777},{"bytes":952,"dir":1,"interval":0},{"bytes":273,"dir":2,"interval":9774},{"bytes":818,"dir":1,"interval":97},{"bytes":719,"dir":1,"interval":0},{"bytes":273,"dir":2,"interval":96},{"bytes":818,"dir":1,"interval":92},{"bytes":412,"dir":1,"interval":0},{"bytes":274,"dir":2,"interval":90},{"bytes":692,"dir":1,"interval":10423},{"bytes":412,"dir":1,"interval":1},{"bytes":268,"dir":2,"interval":10426},{"bytes":818,"dir":1,"interval":12515},{"bytes":908,"dir":1,"interval":0},{"bytes":273,"dir":2,"interval":12515},{"bytes":692,"dir":1,"interval":5971},{"bytes":396,"dir":1,"interval":0},{"bytes":268,"dir":2,"interval":5968},{"bytes":692,"dir":1,"interval":10102},{"bytes":390,"dir":1,"interval":0},{"bytes":269,"dir":2,"interval":10109},{"bytes":693,"dir":1,"interval":20235},{"bytes":1081,"dir":1,"interval":26},{"bytes":268,"dir":2,"interval":20256},{"bytes":818,"dir":1,"interval":178},{"bytes":410,"dir":1,"interval":0},{"bytes":273,"dir":2,"interval":179},{"bytes":818,"dir":1,"interval":120},{"bytes":412,"dir":1,"interval":0},{"bytes":274,"dir":2,"interval":121},{"bytes":818,"dir":1,"interval":160},{"bytes":411,"dir":1,"interval":0},{"bytes":274,"dir":2,"interval":161},{"bytes":692,"dir":1,"interval":2887},{"bytes":376,"dir":1,"interval":0},{"bytes":267,"dir":2,"interval":2901},{"bytes":31,"dir":2,"interval":75000}],"tls":{"version":"tls1.2","sni":"stat.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":64197,"dip":"210.22.247.162","dport":443,"proto":"tcp","c2s_bytes":18337,"s2c_bytes":24959,"c2s_pkts":26,"s2c_pkts":27,"total_pkts":53,"duration":459561,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":47},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":56},{"bytes":655,"dir":1,"interval":50},{"bytes":797,"dir":1,"interval":0},{"bytes":312,"dir":2,"interval":72},{"bytes":656,"dir":1,"interval":123},{"bytes":1188,"dir":1,"interval":3},{"bytes":807,"dir":2,"interval":102},{"bytes":655,"dir":1,"interval":337},{"bytes":804,"dir":1,"interval":1},{"bytes":515,"dir":2,"interval":360},{"bytes":655,"dir":1,"interval":18145},{"bytes":954,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":18155},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":348,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1245,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":915,"dir":2,"interval":0},{"bytes":655,"dir":1,"interval":22685},{"bytes":903,"dir":1,"interval":2},{"bytes":359,"dir":2,"interval":22677},{"bytes":655,"dir":1,"interval":11447},{"bytes":877,"dir":1,"interval":0},{"bytes":320,"dir":2,"interval":11423},{"bytes":655,"dir":1,"interval":181},{"bytes":941,"dir":1,"interval":5},{"bytes":362,"dir":2,"interval":217},{"bytes":656,"dir":1,"interval":268},{"bytes":1030,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":238},{"bytes":477,"dir":2,"interval":0},{"bytes":656,"dir":1,"interval":813},{"bytes":1367,"dir":1,"interval":0},{"bytes":1240,"dir":2,"interval":875},{"bytes":655,"dir":1,"interval":39745},{"bytes":941,"dir":1,"interval":0},{"bytes":364,"dir":2,"interval":39714},{"bytes":656,"dir":1,"interval":360},{"bytes":1030,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":334},{"bytes":528,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":74999}],"tls":{"version":"tls1.2","sni":"u.y.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":63956,"dip":"121.22.232.213","dport":443,"proto":"tcp","c2s_bytes":2926,"s2c_bytes":4533,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":471856,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":230},{"bytes":45,"dir":1,"interval":11},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":753,"dir":1,"interval":0},{"bytes":234,"dir":2,"interval":27},{"bytes":61,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":7},{"bytes":835,"dir":2,"interval":26},{"bytes":30,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":56},{"bytes":520,"dir":1,"interval":54},{"bytes":894,"dir":1,"interval":0},{"bytes":439,"dir":2,"interval":131},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120003},{"bytes":23,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"aweme-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":50041,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":989,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52306,"dip":"39.108.225.212","dport":443,"proto":"tcp","c2s_bytes":4653,"s2c_bytes":4175,"c2s_pkts":10,"s2c_pkts":7,"total_pkts":17,"duration":38535,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":322,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39},{"bytes":126,"dir":1,"interval":1359},{"bytes":311,"dir":1,"interval":13},{"bytes":1440,"dir":1,"interval":0},{"bytes":6,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":127},{"bytes":310,"dir":1,"interval":1884},{"bytes":946,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":1923},{"bytes":310,"dir":1,"interval":5140},{"bytes":656,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":5140},{"bytes":31,"dir":1,"interval":30126}],"tls":{"version":"tls1.2","sni":"ylog.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50042,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":71,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49934,"dip":"172.217.24.14","dport":443,"proto":"tcp","c2s_bytes":1636,"s2c_bytes":4848,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":114011,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":319,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":276},{"bytes":58,"dir":1,"interval":12},{"bytes":86,"dir":1,"interval":0},{"bytes":382,"dir":1,"interval":2},{"bytes":596,"dir":2,"interval":118},{"bytes":31,"dir":1,"interval":107},{"bytes":31,"dir":2,"interval":25},{"bytes":422,"dir":2,"interval":2},{"bytes":39,"dir":1,"interval":28}],"tls":{"version":"tls1.2","sni":"clients1.google.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["1301","1302","1303","c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[0,23,65281,10,11,35,16,5,13,18,51,45,43,27,21]}}
{"sip":"192.168.50.193","sport":50050,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":137,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":50052,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":74,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52324,"dip":"47.107.21.49","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":6551,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":5862,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":680,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"47.107.21.49","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52343,"dip":"111.231.129.233","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":6551,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":413,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1272,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":716,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"111.231.129.233","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52332,"dip":"101.227.131.64","dport":443,"proto":"tcp","c2s_bytes":1241,"s2c_bytes":12592,"c2s_pkts":3,"s2c_pkts":13,"total_pkts":16,"duration":19402,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":29},{"bytes":274,"dir":2,"interval":29},{"bytes":406,"dir":1,"interval":322},{"bytes":318,"dir":1,"interval":3},{"bytes":1360,"dir":2,"interval":143},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":28},{"bytes":1360,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":18948}],"tls":{"version":"tls1.2","sni":"safebrowsing.urlsec.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50053,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":105,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52333,"dip":"17.248.161.177","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5622,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":19311,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":94,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50054,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5221,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":282,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52309,"dip":"39.108.225.212","dport":443,"proto":"tcp","c2s_bytes":1557,"s2c_bytes":3725,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":60470,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":307,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":345},{"bytes":310,"dir":1,"interval":9},{"bytes":573,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":181},{"bytes":31,"dir":1,"interval":30390},{"bytes":31,"dir":2,"interval":60000}],"tls":{"version":"tls1.2","sni":"ylog.huya.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52326,"dip":"17.248.161.175","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3340,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":22515,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52323,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":2583,"s2c_bytes":8841,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30675,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":452,"dir":1,"interval":666},{"bytes":1440,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30065}],"tls":{"version":"tls1.2","sni":"ulogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52304,"dip":"47.101.30.173","dport":443,"proto":"tcp","c2s_bytes":1837,"s2c_bytes":6759,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":68881,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":684,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":473},{"bytes":1194,"dir":1,"interval":2879},{"bytes":38,"dir":2,"interval":2944},{"bytes":42,"dir":2,"interval":27},{"bytes":108,"dir":2,"interval":28}],"tls":{"version":"tls1.2","sni":"e-stat.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52299,"dip":"212.64.99.102","dport":443,"proto":"tcp","c2s_bytes":1116,"s2c_bytes":6841,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":69794,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1272,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":720,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":35},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":4397},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":170,"dir":1,"interval":0},{"bytes":120,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":102},{"bytes":42,"dir":2,"interval":34},{"bytes":190,"dir":2,"interval":17}],"tls":{"version":"tls1.2","sni":"ffilelogapp.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52314,"dip":"193.112.238.228","dport":443,"proto":"tcp","c2s_bytes":21254,"s2c_bytes":4088,"c2s_pkts":20,"s2c_pkts":7,"total_pkts":27,"duration":52170,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":395,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":286,"dir":1,"interval":403},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":4},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":0},{"bytes":526,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":125},{"bytes":285,"dir":1,"interval":19520},{"bytes":1440,"dir":1,"interval":8},{"bytes":608,"dir":1,"interval":0},{"bytes":637,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":19526},{"bytes":284,"dir":1,"interval":19991},{"bytes":831,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":20032}],"tls":{"version":"tls1.2","sni":"statwup.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52302,"dip":"112.74.137.42","dport":443,"proto":"tcp","c2s_bytes":952,"s2c_bytes":6873,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":69793,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":684,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":48},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":4263},{"bytes":53,"dir":1,"interval":22},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":126,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":14},{"bytes":38,"dir":2,"interval":2945},{"bytes":264,"dir":2,"interval":83}],"tls":{"version":"tls1.2","sni":"api-m.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52292,"dip":"47.107.21.49","dport":443,"proto":"tcp","c2s_bytes":1951,"s2c_bytes":6905,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":69794,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":684,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":38},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":4396},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":155,"dir":1,"interval":0},{"bytes":970,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":96},{"bytes":42,"dir":2,"interval":38},{"bytes":254,"dir":2,"interval":77}],"tls":{"version":"tls1.2","sni":"udbdf.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52376,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1465,"s2c_bytes":4464,"c2s_pkts":9,"s2c_pkts":7,"total_pkts":16,"duration":1516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":2},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":1451},{"bytes":58,"dir":1,"interval":31},{"bytes":46,"dir":1,"interval":4},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":188,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":503},{"bytes":393,"dir":2,"interval":2},{"bytes":31,"dir":1,"interval":11},{"bytes":24,"dir":1,"interval":16}],"tls":{"version":"tls1.2","sni":"nbsdk-baichuan.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52325,"dip":"17.142.171.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3316,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":28114,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":436,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gsp10-ssl.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52340,"dip":"17.248.161.43","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":20110,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":443,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52382,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1580,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52418,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1377,"s2c_bytes":281406,"c2s_pkts":4,"s2c_pkts":196,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":166},{"bytes":58,"dir":1,"interval":17},{"bytes":279,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cn-vmc-images.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52417,"dip":"203.187.160.136","dport":443,"proto":"tcp","c2s_bytes":1193,"s2c_bytes":263105,"c2s_pkts":10,"s2c_pkts":190,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":0},{"bytes":311,"dir":2,"interval":21},{"bytes":126,"dir":1,"interval":525},{"bytes":53,"dir":1,"interval":29},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":173,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":72},{"bytes":1448,"dir":2,"interval":22},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":120,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":17},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":216,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":15},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":817,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":154},{"bytes":1448,"dir":2,"interval":99},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":348,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":13},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":120,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":589,"dir":2,"interval":0},{"bytes":110,"dir":1,"interval":261},{"bytes":1448,"dir":2,"interval":475},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":-11},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":-21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":9},{"bytes":972,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":382},{"bytes":1448,"dir":2,"interval":78},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"r1.ykimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50051,"dip":"17.57.145.6","dport":443,"proto":"tcp","c2s_bytes":222,"s2c_bytes":3430,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":19826,"packets":[{"bytes":222,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1398,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"courier.push.apple.com","alpn":"\u0010apns-security-v3\fapns-pack-v1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,16,5,18,23]}}
{"sip":"192.168.50.193","sport":52420,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":789,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52341,"dip":"17.248.161.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":22041,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52429,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1482,"s2c_bytes":281359,"c2s_pkts":4,"s2c_pkts":196,"total_pkts":200,"duration":0,"packets":[{"bytes":553,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":239,"dir":2,"interval":1},{"bytes":239,"dir":2,"interval":0},{"bytes":592,"dir":1,"interval":235},{"bytes":58,"dir":1,"interval":149},{"bytes":279,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":276},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cn-vmc-images.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52430,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1590,"s2c_bytes":74234,"c2s_pkts":5,"s2c_pkts":54,"total_pkts":59,"duration":1244,"packets":[{"bytes":558,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":239,"dir":2,"interval":2},{"bytes":255,"dir":2,"interval":0},{"bytes":597,"dir":1,"interval":242},{"bytes":58,"dir":1,"interval":100},{"bytes":353,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":213},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":-22},{"bytes":1460,"dir":2,"interval":297},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-274},{"bytes":1460,"dir":2,"interval":-11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":285},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":179,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":899}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52345,"dip":"17.248.161.77","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3338,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":20845,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1306,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52435,"dip":"112.54.108.242","dport":443,"proto":"tcp","c2s_bytes":1030,"s2c_bytes":274300,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":250,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":922},{"bytes":53,"dir":1,"interval":108},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":162,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":267},{"bytes":38,"dir":1,"interval":46},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":681,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":778},{"bytes":1460,"dir":2,"interval":750},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mfs.ykimg.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52348,"dip":"17.248.161.177","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5622,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":20104,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1278,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52419,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":2856,"s2c_bytes":264018,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":157},{"bytes":58,"dir":1,"interval":61},{"bytes":346,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":102},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":94,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":4393},{"bytes":1460,"dir":2,"interval":4393},{"bytes":65,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":14,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":647},{"bytes":1460,"dir":2,"interval":656},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":20,"dir":2,"interval":-5},{"bytes":353,"dir":1,"interval":269},{"bytes":1460,"dir":2,"interval":229},{"bytes":1460,"dir":2,"interval":0},{"bytes":65,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1458,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":3989},{"bytes":1460,"dir":2,"interval":3967},{"bytes":64,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52423,"dip":"35.227.252.169","dport":443,"proto":"tcp","c2s_bytes":232,"s2c_bytes":3247,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":10130,"packets":[{"bytes":232,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":355,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"stats.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":52426,"dip":"122.14.43.42","dport":443,"proto":"tcp","c2s_bytes":1060,"s2c_bytes":91240,"c2s_pkts":4,"s2c_pkts":65,"total_pkts":69,"duration":11650,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":244,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":209},{"bytes":386,"dir":1,"interval":138},{"bytes":1460,"dir":2,"interval":181},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":234,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":11281}],"tls":{"version":"tls1.2","sni":"t.youku.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52442,"dip":"111.32.130.118","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":98805,"c2s_pkts":5,"s2c_pkts":71,"total_pkts":76,"duration":5363,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":435},{"bytes":271,"dir":1,"interval":29},{"bytes":1460,"dir":2,"interval":138},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1009,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2489},{"bytes":1460,"dir":2,"interval":2476},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":898,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":2388}],"tls":{"version":"tls1.2","sni":"g2.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52354,"dip":"111.32.130.118","dport":443,"proto":"tcp","c2s_bytes":2571,"s2c_bytes":194816,"c2s_pkts":10,"s2c_pkts":140,"total_pkts":150,"duration":23242,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":126,"dir":1,"interval":916},{"bytes":271,"dir":1,"interval":13},{"bytes":1460,"dir":2,"interval":352},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":952,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":258},{"bytes":1460,"dir":2,"interval":244},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":6551},{"bytes":1460,"dir":2,"interval":6545},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":743,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3109},{"bytes":1460,"dir":2,"interval":3108},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":915,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3144},{"bytes":1460,"dir":2,"interval":3156},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-22},{"bytes":1460,"dir":2,"interval":264},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":109,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3629},{"bytes":1460,"dir":2,"interval":3330},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":863,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3211},{"bytes":1460,"dir":2,"interval":3194},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":713,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":2387}],"tls":{"version":"tls1.2","sni":"g2.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52407,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1428,"s2c_bytes":82088,"c2s_pkts":5,"s2c_pkts":60,"total_pkts":65,"duration":18204,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":99},{"bytes":58,"dir":1,"interval":20},{"bytes":306,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":75,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":627,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":18068}],"tls":{"version":"tls1.2","sni":"dorangesource.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52431,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1943,"s2c_bytes":25552,"c2s_pkts":6,"s2c_pkts":22,"total_pkts":28,"duration":9609,"packets":[{"bytes":558,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":239,"dir":2,"interval":1},{"bytes":239,"dir":2,"interval":0},{"bytes":597,"dir":1,"interval":197},{"bytes":58,"dir":1,"interval":100},{"bytes":353,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":401},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":-208},{"bytes":1460,"dir":2,"interval":208},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1018,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":395},{"bytes":1460,"dir":2,"interval":244},{"bytes":69,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":8909}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52432,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1943,"s2c_bytes":21749,"c2s_pkts":6,"s2c_pkts":19,"total_pkts":25,"duration":9609,"packets":[{"bytes":558,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":239,"dir":2,"interval":4},{"bytes":255,"dir":2,"interval":0},{"bytes":597,"dir":1,"interval":191},{"bytes":58,"dir":1,"interval":64},{"bytes":353,"dir":1,"interval":42},{"bytes":1460,"dir":2,"interval":256},{"bytes":66,"dir":2,"interval":197},{"bytes":1460,"dir":2,"interval":-197},{"bytes":1460,"dir":2,"interval":236},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":695,"dir":2,"interval":-5},{"bytes":353,"dir":1,"interval":684},{"bytes":1460,"dir":2,"interval":443},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":953,"dir":2,"interval":1},{"bytes":24,"dir":1,"interval":8621}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52445,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":991,"s2c_bytes":4790,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":4862,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":386},{"bytes":317,"dir":1,"interval":33},{"bytes":1386,"dir":2,"interval":94},{"bytes":31,"dir":1,"interval":4434}],"tls":{"version":"tls1.2","sni":"image.uc.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52411,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":1077,"s2c_bytes":4873,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":17697,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":837,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":70},{"bytes":403,"dir":1,"interval":4},{"bytes":874,"dir":2,"interval":15},{"bytes":31,"dir":1,"interval":17615}],"tls":{"version":"tls1.2","sni":"market.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52412,"dip":"203.187.160.136","dport":443,"proto":"tcp","c2s_bytes":924,"s2c_bytes":86075,"c2s_pkts":4,"s2c_pkts":64,"total_pkts":68,"duration":17673,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":733,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":8},{"bytes":126,"dir":1,"interval":521},{"bytes":250,"dir":1,"interval":3},{"bytes":1448,"dir":2,"interval":35},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":120,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":192,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":204,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":17144}],"tls":{"version":"tls1.2","sni":"image.uczzd.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52447,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":986,"s2c_bytes":6116,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":4428,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":227,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":511},{"bytes":312,"dir":1,"interval":73},{"bytes":1460,"dir":2,"interval":209},{"bytes":1283,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":3837}],"tls":{"version":"tls1.2","sni":"image.uc.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52446,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":991,"s2c_bytes":5343,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":4429,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":227,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":510},{"bytes":317,"dir":1,"interval":52},{"bytes":1460,"dir":2,"interval":176},{"bytes":74,"dir":2,"interval":0},{"bytes":436,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":3859}],"tls":{"version":"tls1.2","sni":"image.uc.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52399,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1749,"s2c_bytes":6692,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":18696,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":66},{"bytes":58,"dir":1,"interval":35},{"bytes":312,"dir":1,"interval":0},{"bytes":815,"dir":2,"interval":50},{"bytes":315,"dir":1,"interval":25},{"bytes":1460,"dir":2,"interval":25},{"bytes":411,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":18561}],"tls":{"version":"tls1.2","sni":"wvcfg.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52427,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1502,"s2c_bytes":7324,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":10512,"packets":[{"bytes":526,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":239,"dir":2,"interval":0},{"bytes":565,"dir":1,"interval":340},{"bytes":58,"dir":1,"interval":12},{"bytes":329,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":429,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":10156}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52408,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1692,"s2c_bytes":7421,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":18152,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":95},{"bytes":58,"dir":1,"interval":98},{"bytes":262,"dir":1,"interval":0},{"bytes":1138,"dir":2,"interval":120},{"bytes":308,"dir":1,"interval":7344},{"bytes":1460,"dir":2,"interval":7352},{"bytes":817,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":10606}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52438,"dip":"111.13.210.226","dport":443,"proto":"tcp","c2s_bytes":1348,"s2c_bytes":91722,"c2s_pkts":5,"s2c_pkts":66,"total_pkts":71,"duration":7066,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":925},{"bytes":337,"dir":1,"interval":287},{"bytes":1460,"dir":2,"interval":753},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1437,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1365,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":583},{"bytes":832,"dir":2,"interval":576},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":21,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":5246}],"tls":{"version":"tls1.2","sni":"m.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52437,"dip":"111.13.210.226","dport":443,"proto":"tcp","c2s_bytes":1348,"s2c_bytes":49302,"c2s_pkts":5,"s2c_pkts":37,"total_pkts":42,"duration":7067,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":925},{"bytes":337,"dir":1,"interval":287},{"bytes":1460,"dir":2,"interval":740},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":181,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":650},{"bytes":1437,"dir":2,"interval":651},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":5186}],"tls":{"version":"tls1.2","sni":"m.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52436,"dip":"111.13.210.226","dport":443,"proto":"tcp","c2s_bytes":2360,"s2c_bytes":227222,"c2s_pkts":8,"s2c_pkts":162,"total_pkts":170,"duration":8252,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":8},{"bytes":126,"dir":1,"interval":987},{"bytes":337,"dir":1,"interval":52},{"bytes":1460,"dir":2,"interval":452},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1310,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":402},{"bytes":1436,"dir":2,"interval":432},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":903,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":668},{"bytes":1460,"dir":2,"interval":629},{"bytes":1437,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":671,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":774},{"bytes":1460,"dir":2,"interval":803},{"bytes":1440,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":337,"dir":2,"interval":0},{"bytes":338,"dir":1,"interval":1134},{"bytes":830,"dir":2,"interval":1158},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1221,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":4206}],"tls":{"version":"tls1.2","sni":"m.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52439,"dip":"111.13.210.226","dport":443,"proto":"tcp","c2s_bytes":1348,"s2c_bytes":49229,"c2s_pkts":5,"s2c_pkts":36,"total_pkts":41,"duration":7068,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":925},{"bytes":337,"dir":1,"interval":286},{"bytes":1460,"dir":2,"interval":716},{"bytes":1438,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":488},{"bytes":1460,"dir":2,"interval":515},{"bytes":1437,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":738,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":5349}],"tls":{"version":"tls1.2","sni":"m.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52444,"dip":"203.119.169.58","dport":443,"proto":"tcp","c2s_bytes":2708,"s2c_bytes":9405,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":5209,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":1048,"dir":1,"interval":1479},{"bytes":1112,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":338},{"bytes":294,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":3717}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52421,"dip":"111.32.130.118","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":36143,"c2s_pkts":5,"s2c_pkts":28,"total_pkts":33,"duration":13153,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":8},{"bytes":126,"dir":1,"interval":553},{"bytes":271,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":228},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1371,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3277},{"bytes":1460,"dir":2,"interval":3739},{"bytes":1460,"dir":2,"interval":-460},{"bytes":70,"dir":2,"interval":523},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":655,"dir":2,"interval":-8},{"bytes":31,"dir":1,"interval":9293}],"tls":{"version":"tls1.2","sni":"g3.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52402,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":21315,"s2c_bytes":31281,"c2s_pkts":25,"s2c_pkts":27,"total_pkts":52,"duration":18552,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":308,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":1173,"dir":1,"interval":281},{"bytes":1452,"dir":1,"interval":12},{"bytes":182,"dir":1,"interval":0},{"bytes":1028,"dir":2,"interval":125},{"bytes":1167,"dir":1,"interval":27},{"bytes":1452,"dir":1,"interval":0},{"bytes":465,"dir":1,"interval":0},{"bytes":873,"dir":2,"interval":24},{"bytes":1452,"dir":1,"interval":23},{"bytes":596,"dir":1,"interval":6},{"bytes":932,"dir":1,"interval":5},{"bytes":1429,"dir":2,"interval":147},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":288,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":231},{"bytes":482,"dir":1,"interval":0},{"bytes":831,"dir":2,"interval":123},{"bytes":1452,"dir":1,"interval":3287},{"bytes":596,"dir":1,"interval":16},{"bytes":294,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":3317},{"bytes":1273,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":76},{"bytes":596,"dir":1,"interval":0},{"bytes":11,"dir":1,"interval":0},{"bytes":666,"dir":2,"interval":56},{"bytes":1452,"dir":1,"interval":4487},{"bytes":596,"dir":1,"interval":0},{"bytes":870,"dir":1,"interval":4},{"bytes":839,"dir":2,"interval":4490},{"bytes":1452,"dir":1,"interval":89},{"bytes":596,"dir":1,"interval":0},{"bytes":595,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":105},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":753,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":9991}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52404,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":12999,"s2c_bytes":46472,"c2s_pkts":15,"s2c_pkts":37,"total_pkts":52,"duration":18552,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":307,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":1452,"dir":1,"interval":302},{"bytes":505,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":125},{"bytes":139,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":29},{"bytes":596,"dir":1,"interval":0},{"bytes":10,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":29},{"bytes":83,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":41},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":386,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":323},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1196,"dir":2,"interval":0},{"bytes":1177,"dir":1,"interval":3520},{"bytes":1064,"dir":1,"interval":0},{"bytes":716,"dir":2,"interval":3279},{"bytes":1452,"dir":1,"interval":4568},{"bytes":1,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":4538},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":753,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":10079}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52403,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":9451,"s2c_bytes":41174,"c2s_pkts":11,"s2c_pkts":31,"total_pkts":42,"duration":18553,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":1172,"dir":1,"interval":305},{"bytes":1452,"dir":1,"interval":1},{"bytes":210,"dir":1,"interval":0},{"bytes":865,"dir":2,"interval":115},{"bytes":1452,"dir":1,"interval":26},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":377,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":214},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1222,"dir":2,"interval":0},{"bytes":1168,"dir":1,"interval":277},{"bytes":168,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":143},{"bytes":1429,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":17932}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52406,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":19208,"s2c_bytes":33603,"c2s_pkts":22,"s2c_pkts":29,"total_pkts":51,"duration":18549,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":307,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":1177,"dir":1,"interval":300},{"bytes":1452,"dir":1,"interval":0},{"bytes":182,"dir":1,"interval":0},{"bytes":1028,"dir":2,"interval":137},{"bytes":1452,"dir":1,"interval":29},{"bytes":596,"dir":1,"interval":0},{"bytes":995,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":40},{"bytes":716,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":43},{"bytes":596,"dir":1,"interval":0},{"bytes":281,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":64},{"bytes":1429,"dir":2,"interval":0},{"bytes":1189,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":62},{"bytes":79,"dir":1,"interval":0},{"bytes":795,"dir":2,"interval":18},{"bytes":1183,"dir":1,"interval":26},{"bytes":1429,"dir":2,"interval":34},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":206,"dir":2,"interval":0},{"bytes":1176,"dir":1,"interval":122},{"bytes":1452,"dir":1,"interval":0},{"bytes":229,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":123},{"bytes":64,"dir":2,"interval":0},{"bytes":1191,"dir":1,"interval":3320},{"bytes":1064,"dir":1,"interval":5},{"bytes":716,"dir":2,"interval":3363},{"bytes":1452,"dir":1,"interval":4548},{"bytes":596,"dir":1,"interval":0},{"bytes":603,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":4831},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1302,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":10079}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52409,"dip":"124.239.162.222","dport":443,"proto":"tcp","c2s_bytes":1407,"s2c_bytes":5774,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":18148,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":11},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":180},{"bytes":58,"dir":1,"interval":21},{"bytes":285,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":88},{"bytes":308,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":17932}],"tls":{"version":"tls1.2","sni":"ykimg.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52425,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":945,"s2c_bytes":16867,"c2s_pkts":4,"s2c_pkts":14,"total_pkts":18,"duration":12433,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":20},{"bytes":126,"dir":1,"interval":1109},{"bytes":271,"dir":1,"interval":36},{"bytes":1460,"dir":2,"interval":220},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":340,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":11252}],"tls":{"version":"tls1.2","sni":"g4.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52390,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":1487,"s2c_bytes":57850,"c2s_pkts":6,"s2c_pkts":44,"total_pkts":50,"duration":20158,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":21},{"bytes":126,"dir":1,"interval":1544},{"bytes":271,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":101},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":168,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2929},{"bytes":1460,"dir":2,"interval":2928},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":793,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":10036},{"bytes":1460,"dir":2,"interval":10037},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":72,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":870,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":5608}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52389,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":37680,"c2s_pkts":5,"s2c_pkts":29,"total_pkts":34,"duration":20162,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":23},{"bytes":126,"dir":1,"interval":1551},{"bytes":271,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":105},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2930},{"bytes":1460,"dir":2,"interval":2911},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":601,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":15647}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52366,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":1758,"s2c_bytes":132709,"c2s_pkts":7,"s2c_pkts":96,"total_pkts":103,"duration":22079,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":23},{"bytes":126,"dir":1,"interval":1410},{"bytes":271,"dir":1,"interval":474},{"bytes":1460,"dir":2,"interval":1454},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1444,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":1458},{"bytes":1460,"dir":2,"interval":1404},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1104,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3055},{"bytes":1460,"dir":2,"interval":3056},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":77,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":660,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":10036},{"bytes":1460,"dir":2,"interval":10033},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":373,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":5608}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52424,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":945,"s2c_bytes":27463,"c2s_pkts":4,"s2c_pkts":21,"total_pkts":25,"duration":12419,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":25},{"bytes":126,"dir":1,"interval":908},{"bytes":271,"dir":1,"interval":18},{"bytes":1460,"dir":2,"interval":105},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":716,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":11455}],"tls":{"version":"tls1.2","sni":"g4.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52405,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":15883,"s2c_bytes":30459,"c2s_pkts":20,"s2c_pkts":26,"total_pkts":46,"duration":18574,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":307,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":1153,"dir":1,"interval":304},{"bytes":1452,"dir":1,"interval":0},{"bytes":190,"dir":1,"interval":0},{"bytes":826,"dir":2,"interval":133},{"bytes":1452,"dir":1,"interval":28},{"bytes":596,"dir":1,"interval":0},{"bytes":668,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":19},{"bytes":120,"dir":2,"interval":0},{"bytes":1175,"dir":1,"interval":38},{"bytes":747,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":104},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":873,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":110},{"bytes":596,"dir":1,"interval":0},{"bytes":4,"dir":1,"interval":0},{"bytes":1042,"dir":2,"interval":44},{"bytes":1452,"dir":1,"interval":106},{"bytes":596,"dir":1,"interval":0},{"bytes":56,"dir":1,"interval":0},{"bytes":843,"dir":2,"interval":106},{"bytes":1452,"dir":1,"interval":3326},{"bytes":596,"dir":1,"interval":0},{"bytes":249,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":3343},{"bytes":1273,"dir":2,"interval":0},{"bytes":1449,"dir":1,"interval":4549},{"bytes":1429,"dir":2,"interval":4542},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":753,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":10077}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52384,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":20645,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52393,"dip":"17.142.171.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3316,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":23173,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1284,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gsp10-ssl.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52350,"dip":"203.119.169.241","dport":443,"proto":"tcp","c2s_bytes":1227,"s2c_bytes":5937,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":30101,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":19,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":387,"dir":1,"interval":87},{"bytes":323,"dir":1,"interval":12},{"bytes":31,"dir":2,"interval":30035}],"tls":{"version":"tls1.2","sni":"abtest.alibaba.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52349,"dip":"203.119.169.58","dport":443,"proto":"tcp","c2s_bytes":789,"s2c_bytes":7801,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":30126,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":139,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":272,"dir":1,"interval":117},{"bytes":31,"dir":2,"interval":30050}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52386,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":2531,"s2c_bytes":7669,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":26444,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":322,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":73,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":1547},{"bytes":531,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":24885}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52363,"dip":"123.125.104.218","dport":443,"proto":"tcp","c2s_bytes":1339,"s2c_bytes":5036,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":32304,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1157,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":4},{"bytes":822,"dir":1,"interval":926},{"bytes":677,"dir":2,"interval":417}],"tls":{"version":"tls1.2","sni":"api.chaohua.weibo.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52368,"dip":"203.119.207.250","dport":443,"proto":"tcp","c2s_bytes":2129,"s2c_bytes":8841,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":31727,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":172,"dir":1,"interval":1720},{"bytes":1440,"dir":1,"interval":-474},{"bytes":31,"dir":2,"interval":31464}],"tls":{"version":"tls1.2","sni":"ulogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52373,"dip":"203.119.217.112","dport":443,"proto":"tcp","c2s_bytes":1442,"s2c_bytes":3592,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":31509,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":334,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":656,"dir":1,"interval":1500},{"bytes":269,"dir":1,"interval":2},{"bytes":31,"dir":2,"interval":30486}],"tls":{"version":"tls1.2","sni":"acs4baichuan.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52397,"dip":"106.11.45.4","dport":443,"proto":"tcp","c2s_bytes":806,"s2c_bytes":7705,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":31798,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":1},{"bytes":1452,"dir":2,"interval":0},{"bytes":343,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":289,"dir":1,"interval":1791},{"bytes":31,"dir":2,"interval":30037}],"tls":{"version":"tls1.2","sni":"apiv4-iyes.youku.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52440,"dip":"17.248.161.177","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5621,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":19910,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":93,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52367,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":2811,"s2c_bytes":264339,"c2s_pkts":10,"s2c_pkts":190,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":20},{"bytes":126,"dir":1,"interval":1477},{"bytes":271,"dir":1,"interval":26},{"bytes":1460,"dir":2,"interval":692},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1327,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":7593},{"bytes":1460,"dir":2,"interval":7353},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":740,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3430},{"bytes":1460,"dir":2,"interval":3430},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1118,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":6971},{"bytes":1460,"dir":2,"interval":6965},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1266,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3629},{"bytes":1460,"dir":2,"interval":3626},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":139,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3292},{"bytes":1460,"dir":2,"interval":3286},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":4246},{"bytes":1460,"dir":2,"interval":4244},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1203,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":5095},{"bytes":1460,"dir":2,"interval":5089},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"g4.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52468,"dip":"17.142.171.16","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3316,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":20757,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1284,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gsp10-ssl.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52461,"dip":"111.32.173.227","dport":443,"proto":"tcp","c2s_bytes":945,"s2c_bytes":29822,"c2s_pkts":4,"s2c_pkts":24,"total_pkts":28,"duration":31372,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":812},{"bytes":271,"dir":1,"interval":161},{"bytes":1460,"dir":2,"interval":955},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":84,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30388}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52463,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":975,"s2c_bytes":6148,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31240,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":227,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":841},{"bytes":301,"dir":1,"interval":12},{"bytes":1460,"dir":2,"interval":169},{"bytes":1315,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30381}],"tls":{"version":"tls1.2","sni":"image.uc.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52457,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":1308,"s2c_bytes":7140,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":31649,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":276},{"bytes":317,"dir":1,"interval":11},{"bytes":1460,"dir":2,"interval":297},{"bytes":210,"dir":2,"interval":0},{"bytes":317,"dir":1,"interval":736},{"bytes":1460,"dir":2,"interval":719},{"bytes":606,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30617}],"tls":{"version":"tls1.2","sni":"image.uc.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52462,"dip":"111.32.173.227","dport":443,"proto":"tcp","c2s_bytes":945,"s2c_bytes":30853,"c2s_pkts":4,"s2c_pkts":23,"total_pkts":27,"duration":31372,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":16},{"bytes":126,"dir":1,"interval":812},{"bytes":271,"dir":1,"interval":192},{"bytes":1460,"dir":2,"interval":981},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1186,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30357}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52475,"dip":"17.248.161.43","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":20039,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52503,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4054,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":232,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52472,"dip":"203.119.169.241","dport":443,"proto":"tcp","c2s_bytes":1227,"s2c_bytes":5935,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":32168,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":17,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":387,"dir":1,"interval":2160},{"bytes":323,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":32010}],"tls":{"version":"tls1.2","sni":"abtest.alibaba.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52504,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1799,"s2c_bytes":274715,"c2s_pkts":5,"s2c_pkts":195,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":334},{"bytes":58,"dir":1,"interval":42},{"bytes":353,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":135},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":197,"dir":2,"interval":0},{"bytes":348,"dir":1,"interval":855},{"bytes":1460,"dir":2,"interval":948},{"bytes":66,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1372,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":40,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52353,"dip":"111.32.130.118","dport":443,"proto":"tcp","c2s_bytes":3353,"s2c_bytes":259210,"c2s_pkts":12,"s2c_pkts":188,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":10},{"bytes":126,"dir":1,"interval":930},{"bytes":271,"dir":1,"interval":14},{"bytes":1460,"dir":2,"interval":347},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":836,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":5304},{"bytes":1460,"dir":2,"interval":5284},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":877,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3655},{"bytes":1460,"dir":2,"interval":3652},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1265,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":4046},{"bytes":1460,"dir":2,"interval":4075},{"bytes":1460,"dir":2,"interval":-19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":241},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-261},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":242},{"bytes":1460,"dir":2,"interval":-241},{"bytes":1460,"dir":2,"interval":254},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-274},{"bytes":1460,"dir":2,"interval":274},{"bytes":1160,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3699},{"bytes":1460,"dir":2,"interval":3414},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":874,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3404},{"bytes":1460,"dir":2,"interval":3404},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":759,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3681},{"bytes":1460,"dir":2,"interval":3672},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":776,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":686,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3344},{"bytes":1460,"dir":2,"interval":3340},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1424,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":22745},{"bytes":1460,"dir":2,"interval":22743},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1151,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":11286},{"bytes":1460,"dir":2,"interval":11439},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"g3.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52473,"dip":"203.119.169.58","dport":443,"proto":"tcp","c2s_bytes":820,"s2c_bytes":8131,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":33304,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":409,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":272,"dir":1,"interval":2844},{"bytes":448,"dir":2,"interval":673},{"bytes":31,"dir":1,"interval":30453}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52471,"dip":"106.11.251.23","dport":443,"proto":"tcp","c2s_bytes":1312,"s2c_bytes":3653,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":33358,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":295,"dir":2,"interval":6},{"bytes":274,"dir":2,"interval":25},{"bytes":383,"dir":1,"interval":2941},{"bytes":381,"dir":1,"interval":0},{"bytes":164,"dir":2,"interval":186},{"bytes":31,"dir":1,"interval":30393}],"tls":{"version":"tls1.2","sni":"h-adashx.ut.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52505,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":2176,"s2c_bytes":40140,"c2s_pkts":7,"s2c_pkts":34,"total_pkts":41,"duration":1688,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":239,"dir":2,"interval":2},{"bytes":239,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":244},{"bytes":58,"dir":1,"interval":30},{"bytes":353,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":74},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":828,"dir":2,"interval":0},{"bytes":349,"dir":1,"interval":568},{"bytes":1460,"dir":2,"interval":550},{"bytes":1460,"dir":2,"interval":0},{"bytes":22,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1387,"dir":2,"interval":0},{"bytes":352,"dir":1,"interval":741},{"bytes":1460,"dir":2,"interval":741},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":228,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":103}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52385,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":1564,"s2c_bytes":247289,"c2s_pkts":11,"s2c_pkts":177,"total_pkts":188,"duration":62284,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":2},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":23},{"bytes":58,"dir":1,"interval":14},{"bytes":46,"dir":1,"interval":5},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":168,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":587,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":63},{"bytes":1460,"dir":2,"interval":63},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1018,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":922,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":224,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":335,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":31819},{"bytes":73,"dir":1,"interval":3947}],"tls":{"version":"tls1.2","sni":"ossgw.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52489,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":2134,"s2c_bytes":8842,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":32351,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":444,"dir":1,"interval":2343},{"bytes":1173,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30077}],"tls":{"version":"tls1.2","sni":"ulogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52495,"dip":"106.11.45.4","dport":443,"proto":"tcp","c2s_bytes":837,"s2c_bytes":8027,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":32569,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":313,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":289,"dir":1,"interval":1920},{"bytes":440,"dir":2,"interval":30},{"bytes":31,"dir":1,"interval":30636}],"tls":{"version":"tls1.2","sni":"apiv4-iyes.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52521,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1531,"s2c_bytes":263753,"c2s_pkts":10,"s2c_pkts":190,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":459},{"bytes":58,"dir":1,"interval":19},{"bytes":46,"dir":1,"interval":9},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":168,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":34},{"bytes":31,"dir":1,"interval":17},{"bytes":1460,"dir":2,"interval":70},{"bytes":1204,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":154},{"bytes":1460,"dir":2,"interval":95},{"bytes":661,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":68,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1090,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":388,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":322},{"bytes":1460,"dir":2,"interval":334},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ossgw.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52369,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1482,"s2c_bytes":5382,"c2s_pkts":9,"s2c_pkts":10,"total_pkts":19,"duration":71102,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":269},{"bytes":58,"dir":1,"interval":20},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":161,"dir":1,"interval":0},{"bytes":68,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":40},{"bytes":701,"dir":2,"interval":2},{"bytes":31,"dir":2,"interval":0},{"bytes":548,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":957}],"tls":{"version":"tls1.2","sni":"nbsdk-baichuan.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52528,"dip":"111.32.173.231","dport":443,"proto":"tcp","c2s_bytes":1253,"s2c_bytes":278242,"c2s_pkts":4,"s2c_pkts":196,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":264},{"bytes":305,"dir":1,"interval":17},{"bytes":1460,"dir":2,"interval":267},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1106,"dir":2,"interval":0},{"bytes":305,"dir":1,"interval":3626},{"bytes":1460,"dir":2,"interval":3591},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":424,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":706,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"r1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52416,"dip":"111.32.130.118","dport":443,"proto":"tcp","c2s_bytes":2300,"s2c_bytes":180000,"c2s_pkts":9,"s2c_pkts":131,"total_pkts":140,"duration":75911,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":15},{"bytes":126,"dir":1,"interval":434},{"bytes":271,"dir":1,"interval":12},{"bytes":1460,"dir":2,"interval":290},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":106,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3179},{"bytes":1460,"dir":2,"interval":3163},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":943,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":4046},{"bytes":1460,"dir":2,"interval":4051},{"bytes":1460,"dir":2,"interval":211},{"bytes":1460,"dir":2,"interval":-211},{"bytes":1460,"dir":2,"interval":292},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1302,"dir":2,"interval":-21},{"bytes":271,"dir":1,"interval":7103},{"bytes":1460,"dir":2,"interval":6823},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":431,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":7025},{"bytes":1460,"dir":2,"interval":6963},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":447,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":22745},{"bytes":1460,"dir":2,"interval":22713},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":610,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31348}],"tls":{"version":"tls1.2","sni":"g3.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52531,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":5441,"s2c_bytes":7670,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":6917,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":323,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":571},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":537,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":6319}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52493,"dip":"111.32.130.119","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":51249,"c2s_pkts":5,"s2c_pkts":37,"total_pkts":42,"duration":48108,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":16},{"bytes":126,"dir":1,"interval":2058},{"bytes":271,"dir":1,"interval":12},{"bytes":1460,"dir":2,"interval":55},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1194,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":15235},{"bytes":1460,"dir":2,"interval":15219},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1408,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30787}],"tls":{"version":"tls1.2","sni":"g2.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52492,"dip":"111.32.130.119","dport":443,"proto":"tcp","c2s_bytes":2029,"s2c_bytes":124485,"c2s_pkts":8,"s2c_pkts":92,"total_pkts":100,"duration":51335,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":2046},{"bytes":271,"dir":1,"interval":21},{"bytes":1460,"dir":2,"interval":77},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1080,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":827},{"bytes":1460,"dir":2,"interval":802},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":948,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":10204},{"bytes":1460,"dir":2,"interval":10204},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":279,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":4205},{"bytes":1460,"dir":2,"interval":4198},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":759,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3071},{"bytes":1460,"dir":2,"interval":3067},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":739,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30956}],"tls":{"version":"tls1.2","sni":"g2.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52502,"dip":"203.119.169.89","dport":443,"proto":"tcp","c2s_bytes":3211,"s2c_bytes":7802,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":30101,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":424,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":10},{"bytes":73,"dir":2,"interval":0},{"bytes":561,"dir":1,"interval":92},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":85,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30023}],"tls":{"version":"tls1.2","sni":"audid-api.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52509,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1806,"s2c_bytes":5577,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":32536,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":803},{"bytes":58,"dir":1,"interval":18},{"bytes":329,"dir":1,"interval":1},{"bytes":785,"dir":2,"interval":62},{"bytes":331,"dir":1,"interval":712},{"bytes":786,"dir":2,"interval":938},{"bytes":24,"dir":1,"interval":31001},{"bytes":24,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52486,"dip":"111.32.130.119","dport":443,"proto":"tcp","c2s_bytes":945,"s2c_bytes":41749,"c2s_pkts":4,"s2c_pkts":31,"total_pkts":35,"duration":62944,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":2734},{"bytes":271,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":47},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":371,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":60203}],"tls":{"version":"tls1.2","sni":"g2.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52510,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1478,"s2c_bytes":7267,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":33904,"packets":[{"bytes":526,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":565,"dir":1,"interval":2550},{"bytes":58,"dir":1,"interval":1348},{"bytes":329,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":3109},{"bytes":107,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":52516,"dip":"203.119.169.58","dport":443,"proto":"tcp","c2s_bytes":2665,"s2c_bytes":7803,"c2s_pkts":3,"s2c_pkts":9,"total_pkts":12,"duration":31768,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":425,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":1042,"dir":1,"interval":1761},{"bytes":1106,"dir":1,"interval":1},{"bytes":31,"dir":2,"interval":30179}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52508,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":2911,"s2c_bytes":27297,"c2s_pkts":8,"s2c_pkts":23,"total_pkts":31,"duration":36843,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":2},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":244},{"bytes":58,"dir":1,"interval":32},{"bytes":353,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":60},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":360,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":1410},{"bytes":1460,"dir":2,"interval":1410},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":980,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":1764},{"bytes":377,"dir":1,"interval":33392},{"bytes":377,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52517,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1487,"s2c_bytes":23175,"c2s_pkts":5,"s2c_pkts":19,"total_pkts":24,"duration":31195,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":239,"dir":2,"interval":1},{"bytes":239,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":445},{"bytes":58,"dir":1,"interval":81},{"bytes":365,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":107},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":236,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30667}],"tls":{"version":"tls1.2","sni":"ykpic.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52586,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":1417,"s2c_bytes":7315,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":712,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":526},{"bytes":432,"dir":1,"interval":5},{"bytes":311,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":186},{"bytes":619,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":177}],"tls":{"version":"tls1.2","sni":"security.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52555,"dip":"31.13.82.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3395,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":1620,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1363,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52556,"dip":"31.13.82.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3395,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":2640,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52598,"dip":"182.254.53.234","dport":443,"proto":"tcp","c2s_bytes":781,"s2c_bytes":285513,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":186,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":264,"dir":1,"interval":179},{"bytes":1460,"dir":2,"interval":65},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"starfile.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52575,"dip":"111.32.173.232","dport":443,"proto":"tcp","c2s_bytes":1253,"s2c_bytes":279743,"c2s_pkts":4,"s2c_pkts":196,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":1843},{"bytes":305,"dir":1,"interval":54},{"bytes":1460,"dir":2,"interval":93},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":393,"dir":2,"interval":0},{"bytes":305,"dir":1,"interval":1167},{"bytes":1460,"dir":2,"interval":1137},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1059,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"r1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52605,"dip":"52.80.48.253","dport":443,"proto":"tcp","c2s_bytes":1954,"s2c_bytes":3651,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":680,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":371,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":8},{"bytes":203,"dir":1,"interval":254},{"bytes":1203,"dir":1,"interval":0},{"bytes":302,"dir":2,"interval":260},{"bytes":31,"dir":1,"interval":421},{"bytes":31,"dir":2,"interval":374}],"tls":{"version":"tls1.2","sni":"adt.xdrig.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52604,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1368,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52524,"dip":"111.32.173.231","dport":443,"proto":"tcp","c2s_bytes":979,"s2c_bytes":110759,"c2s_pkts":4,"s2c_pkts":79,"total_pkts":83,"duration":32249,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":2014},{"bytes":305,"dir":1,"interval":52},{"bytes":1460,"dir":2,"interval":139},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":690,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30182}],"tls":{"version":"tls1.2","sni":"r1.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52560,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3626,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":4847,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":416,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"common.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52603,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":1073,"s2c_bytes":5461,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":2219,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":39},{"bytes":126,"dir":1,"interval":1328},{"bytes":399,"dir":1,"interval":546},{"bytes":241,"dir":2,"interval":1419},{"bytes":31,"dir":1,"interval":306}],"tls":{"version":"tls1.2","sni":"apm.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52559,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":5267,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":5076,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1585},{"bytes":1176,"dir":2,"interval":38},{"bytes":850,"dir":2,"interval":-1623},{"bytes":290,"dir":2,"interval":1662},{"bytes":126,"dir":1,"interval":4808},{"bytes":31,"dir":2,"interval":469}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52566,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":5251,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":6305,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":36},{"bytes":31,"dir":2,"interval":1712},{"bytes":126,"dir":1,"interval":6268}],"tls":{"version":"tls1.2","sni":"hd.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52615,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2237,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52607,"dip":"31.13.82.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3395,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":4351,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52628,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":856,"s2c_bytes":286717,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":339,"dir":1,"interval":1800},{"bytes":1460,"dir":2,"interval":618},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pt-starfile.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52613,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3121,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52616,"dip":"114.67.225.6","dport":443,"proto":"tcp","c2s_bytes":2410,"s2c_bytes":3714,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":2939,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":1995},{"bytes":203,"dir":1,"interval":268},{"bytes":1410,"dir":1,"interval":0},{"bytes":123,"dir":1,"interval":0},{"bytes":200,"dir":2,"interval":521},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":672}],"tls":{"version":"tls1.2","sni":"me.xdrig.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52629,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":1300,"s2c_bytes":5670,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":2284,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":1671},{"bytes":626,"dir":1,"interval":159},{"bytes":450,"dir":2,"interval":482},{"bytes":31,"dir":1,"interval":418}],"tls":{"version":"tls1.2","sni":"apm.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52455,"dip":"111.32.173.227","dport":443,"proto":"tcp","c2s_bytes":2029,"s2c_bytes":88026,"c2s_pkts":8,"s2c_pkts":67,"total_pkts":75,"duration":83115,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":126,"dir":1,"interval":2011},{"bytes":271,"dir":1,"interval":16},{"bytes":1460,"dir":2,"interval":1058},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":64,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":14446},{"bytes":1460,"dir":2,"interval":14429},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":757,"dir":2,"interval":12},{"bytes":271,"dir":1,"interval":3100},{"bytes":1460,"dir":2,"interval":3085},{"bytes":1460,"dir":2,"interval":0},{"bytes":72,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1161,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3401},{"bytes":1460,"dir":2,"interval":3399},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":652,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3118},{"bytes":31,"dir":1,"interval":57021}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52648,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1629,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52652,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1286,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52534,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":3514,"s2c_bytes":18829,"c2s_pkts":5,"s2c_pkts":15,"total_pkts":20,"duration":30532,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":308,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":1452,"dir":1,"interval":165},{"bytes":596,"dir":1,"interval":0},{"bytes":918,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":409},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1244,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30358}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52537,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":2727,"s2c_bytes":8265,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":30537,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":1193,"dir":1,"interval":245},{"bytes":986,"dir":1,"interval":0},{"bytes":682,"dir":2,"interval":261},{"bytes":31,"dir":1,"interval":30278}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52655,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1050,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52533,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":2530,"s2c_bytes":8963,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":31607,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":1452,"dir":1,"interval":490},{"bytes":530,"dir":1,"interval":0},{"bytes":1380,"dir":2,"interval":40},{"bytes":31,"dir":1,"interval":31109}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52654,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3626,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1773,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"common.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52659,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":611,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52658,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":785,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52663,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":472,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52662,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":603,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52661,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":669,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52667,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":446,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52669,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":572,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52668,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":631,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52670,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":470,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52674,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":509,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52666,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3626,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1333,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"common.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52675,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":579,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52676,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":532,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52679,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":487,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52678,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":599,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52680,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":521,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52681,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":466,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52682,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":496,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52683,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":559,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52684,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":518,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52501,"dip":"111.32.173.227","dport":443,"proto":"tcp","c2s_bytes":2811,"s2c_bytes":260475,"c2s_pkts":10,"s2c_pkts":190,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":16},{"bytes":126,"dir":1,"interval":219},{"bytes":271,"dir":1,"interval":27},{"bytes":1460,"dir":2,"interval":100},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1085,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":11300},{"bytes":1460,"dir":2,"interval":11282},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":504,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":10337},{"bytes":1460,"dir":2,"interval":10333},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":716,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":1759},{"bytes":1460,"dir":2,"interval":1756},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1368,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3461},{"bytes":1460,"dir":2,"interval":3458},{"bytes":1460,"dir":2,"interval":0},{"bytes":71,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":16824},{"bytes":1460,"dir":2,"interval":16829},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1207,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":64,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":8512},{"bytes":1460,"dir":2,"interval":8502},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":232,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3084}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52686,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":571,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52685,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":690,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":10},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52687,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":538,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52688,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":505,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52692,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":780,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52691,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":826,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52689,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":877,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52693,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":612,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52535,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":5553,"s2c_bytes":10889,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":37204,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":1452,"dir":1,"interval":458},{"bytes":596,"dir":1,"interval":0},{"bytes":1016,"dir":1,"interval":83},{"bytes":1429,"dir":2,"interval":236},{"bytes":558,"dir":2,"interval":0},{"bytes":1452,"dir":1,"interval":5607},{"bytes":489,"dir":1,"interval":61},{"bytes":1288,"dir":2,"interval":5654},{"bytes":31,"dir":1,"interval":30989},{"bytes":31,"dir":2,"interval":30972}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52536,"dip":"106.11.47.27","dport":443,"proto":"tcp","c2s_bytes":10795,"s2c_bytes":18445,"c2s_pkts":12,"s2c_pkts":17,"total_pkts":29,"duration":36909,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":308,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":1195,"dir":1,"interval":165},{"bytes":1452,"dir":1,"interval":79},{"bytes":290,"dir":1,"interval":0},{"bytes":700,"dir":2,"interval":206},{"bytes":1186,"dir":1,"interval":21},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":730,"dir":1,"interval":0},{"bytes":682,"dir":2,"interval":31},{"bytes":1452,"dir":1,"interval":5585},{"bytes":1200,"dir":1,"interval":25},{"bytes":694,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":5739},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":876,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31024},{"bytes":31,"dir":2,"interval":30881}],"tls":{"version":"tls1.2","sni":"acs.youku.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52694,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":530,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52690,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1197,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52698,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":526,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52699,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":545,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52695,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":811,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52702,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":575,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52696,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1225,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52704,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":604,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52707,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":609,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52705,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":718,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52708,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":614,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52697,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3626,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1471,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"common.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52538,"dip":"140.205.218.11","dport":443,"proto":"tcp","c2s_bytes":2270,"s2c_bytes":3653,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31424,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":295,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":28},{"bytes":384,"dir":1,"interval":1271},{"bytes":1338,"dir":1,"interval":0},{"bytes":164,"dir":2,"interval":196},{"bytes":31,"dir":1,"interval":30148}],"tls":{"version":"tls1.2","sni":"h-adashx.ut.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52709,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":559,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52712,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":512,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52711,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":556,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52713,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":429,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52718,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":538,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52717,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":574,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52720,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":494,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52478,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":1758,"s2c_bytes":92733,"c2s_pkts":7,"s2c_pkts":67,"total_pkts":74,"duration":86114,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":25},{"bytes":126,"dir":1,"interval":9497},{"bytes":271,"dir":1,"interval":26},{"bytes":1460,"dir":2,"interval":6793},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2728},{"bytes":1460,"dir":2,"interval":2704},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2913},{"bytes":1460,"dir":2,"interval":2913},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1154,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":13770},{"bytes":31,"dir":1,"interval":57180}],"tls":{"version":"tls1.2","sni":"g4.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52539,"dip":"140.205.218.11","dport":443,"proto":"tcp","c2s_bytes":6191,"s2c_bytes":3638,"c2s_pkts":7,"s2c_pkts":5,"total_pkts":12,"duration":31224,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":24},{"bytes":384,"dir":1,"interval":258},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":903,"dir":1,"interval":4},{"bytes":164,"dir":2,"interval":113},{"bytes":31,"dir":1,"interval":30954}],"tls":{"version":"tls1.2","sni":"h-adashx.ut.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52721,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":523,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52722,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":548,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52719,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1399,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52511,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1487,"s2c_bytes":4030,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":52996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":2},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":10},{"bytes":24,"dir":2,"interval":837},{"bytes":58,"dir":1,"interval":1118},{"bytes":365,"dir":1,"interval":0},{"bytes":24,"dir":1,"interval":29163}],"tls":{"version":"tls1.2","sni":"ykpic.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52723,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":520,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52724,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":551,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52726,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":462,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52727,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":505,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52728,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":663,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52729,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":523,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":50}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52725,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1407,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52731,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":677,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52735,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":515,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52730,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":841,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52736,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":636,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52746,"dip":"27.221.30.11","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3579,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":188,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":15}],"tls":{"version":"tls1.2","sni":"27.221.30.11","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52749,"dip":"27.221.30.11","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3579,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":171,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":13}],"tls":{"version":"tls1.2","sni":"27.221.30.11","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52744,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":501,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52738,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":798,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52745,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":492,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52750,"dip":"27.221.30.11","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3579,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":167,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":13}],"tls":{"version":"tls1.2","sni":"27.221.30.11","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52743,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":665,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52748,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":655,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52751,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":493,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52741,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3626,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1175,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"common.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52753,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":507,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52752,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":507,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52756,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":443,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52755,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":658,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52757,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":591,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52758,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":517,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52759,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":631,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52765,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":446,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52762,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":578,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52764,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":596,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52763,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":673,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52766,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":694,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52767,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":510,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52496,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":2811,"s2c_bytes":261538,"c2s_pkts":10,"s2c_pkts":190,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":19},{"bytes":126,"dir":1,"interval":1595},{"bytes":271,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":222},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1150,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2090},{"bytes":1460,"dir":2,"interval":2063},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":658,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":29835},{"bytes":1460,"dir":2,"interval":29824},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1426,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":11616},{"bytes":1460,"dir":2,"interval":11612},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":906,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":17730},{"bytes":1460,"dir":2,"interval":17738},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-22},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":-23},{"bytes":353,"dir":2,"interval":278},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1173,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":7830},{"bytes":1460,"dir":2,"interval":7570},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":291,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":7010},{"bytes":1460,"dir":2,"interval":6959},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1183,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2105},{"bytes":1460,"dir":2,"interval":2103},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"g4.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52768,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":577,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52770,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":487,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52771,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":660,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52761,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2388,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52769,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1592,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":973},{"bytes":1176,"dir":2,"interval":41},{"bytes":850,"dir":2,"interval":-1013},{"bytes":290,"dir":2,"interval":1055}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52774,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":575,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52775,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":522,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52776,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":553,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52778,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":560,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52779,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":529,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52780,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":520,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52781,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":532,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52772,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1394,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52782,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":575,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52784,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":494,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52785,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":496,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52786,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":537,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52789,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52542,"dip":"111.32.173.231","dport":443,"proto":"tcp","c2s_bytes":979,"s2c_bytes":164921,"c2s_pkts":4,"s2c_pkts":115,"total_pkts":119,"duration":31377,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":25},{"bytes":126,"dir":1,"interval":855},{"bytes":305,"dir":1,"interval":11},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":934,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30511}],"tls":{"version":"tls1.2","sni":"r1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52791,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":788,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52790,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":806,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52792,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":252,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52787,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1494,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":45}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52797,"dip":"27.221.30.11","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3579,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":424,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16}],"tls":{"version":"tls1.2","sni":"27.221.30.11","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52793,"dip":"116.85.3.10","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3581,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":460,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.10","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52800,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":547,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52799,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":548,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52798,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":785,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52801,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":675,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52794,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":972,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52795,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1090,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52803,"dip":"27.221.30.11","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3579,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":362,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":15}],"tls":{"version":"tls1.2","sni":"27.221.30.11","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52527,"dip":"203.119.169.58","dport":443,"proto":"tcp","c2s_bytes":4863,"s2c_bytes":11137,"c2s_pkts":6,"s2c_pkts":11,"total_pkts":17,"duration":55184,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":1046,"dir":1,"interval":3795},{"bytes":1109,"dir":1,"interval":65},{"bytes":1429,"dir":2,"interval":384},{"bytes":269,"dir":2,"interval":0},{"bytes":1054,"dir":1,"interval":20675},{"bytes":1106,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":20773},{"bytes":328,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30636}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52805,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":609,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52804,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":612,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52808,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":575,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52810,"dip":"27.221.30.11","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3579,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":361,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":15}],"tls":{"version":"tls1.2","sni":"27.221.30.11","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52811,"dip":"52.80.48.253","dport":443,"proto":"tcp","c2s_bytes":2197,"s2c_bytes":3620,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":346,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":371,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":4},{"bytes":203,"dir":1,"interval":283},{"bytes":1446,"dir":1,"interval":0},{"bytes":302,"dir":2,"interval":145},{"bytes":31,"dir":1,"interval":58}],"tls":{"version":"tls1.2","sni":"adt.xdrig.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52807,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":688,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52802,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1192,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52818,"dip":"114.67.225.6","dport":443,"proto":"tcp","c2s_bytes":2194,"s2c_bytes":3714,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":296,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":215},{"bytes":203,"dir":1,"interval":8},{"bytes":1317,"dir":1,"interval":4},{"bytes":200,"dir":2,"interval":87},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":62}],"tls":{"version":"tls1.2","sni":"me.xdrig.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52814,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":574,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52815,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":561,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52817,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":565,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52816,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":613,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52820,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":555,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52821,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":643,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52824,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":564,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52823,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":735,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52822,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":747,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52819,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1434,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52825,"dip":"116.85.3.10","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3581,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":503,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.10","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52827,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":518,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52826,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":544,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52828,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52587,"dip":"116.85.3.3","dport":443,"proto":"tcp","c2s_bytes":6806,"s2c_bytes":5397,"c2s_pkts":8,"s2c_pkts":6,"total_pkts":14,"duration":30827,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":427},{"bytes":366,"dir":1,"interval":6},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":2},{"bytes":1452,"dir":1,"interval":0},{"bytes":1410,"dir":1,"interval":5},{"bytes":192,"dir":2,"interval":112},{"bytes":31,"dir":1,"interval":30380}],"tls":{"version":"tls1.2","sni":"omgup.xiaojukeji.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52829,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":738,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52833,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":501,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52832,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":557,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52834,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":522,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52836,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":563,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52837,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":528,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52835,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":700,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52830,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1426,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52588,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":1975,"s2c_bytes":10164,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":31835,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":401,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":1466},{"bytes":766,"dir":1,"interval":27},{"bytes":535,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":250},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":729,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30337}],"tls":{"version":"tls1.2","sni":"epassport.diditaxi.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52568,"dip":"54.223.235.163","dport":443,"proto":"tcp","c2s_bytes":1962,"s2c_bytes":5527,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":32924,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":5},{"bytes":289,"dir":1,"interval":2584},{"bytes":219,"dir":2,"interval":54},{"bytes":316,"dir":1,"interval":31},{"bytes":809,"dir":1,"interval":2},{"bytes":209,"dir":2,"interval":82},{"bytes":31,"dir":1,"interval":30301},{"bytes":31,"dir":2,"interval":30250}],"tls":{"version":"tls1.2","sni":"log.trackingio.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52585,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":2935,"s2c_bytes":5685,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":32863,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41},{"bytes":126,"dir":1,"interval":670},{"bytes":1051,"dir":1,"interval":7},{"bytes":240,"dir":2,"interval":66},{"bytes":1210,"dir":1,"interval":2041},{"bytes":209,"dir":2,"interval":2041},{"bytes":31,"dir":1,"interval":30137}],"tls":{"version":"tls1.2","sni":"msggate.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52563,"dip":"116.85.3.10","dport":443,"proto":"tcp","c2s_bytes":1023,"s2c_bytes":5766,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":32925,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":2568},{"bytes":349,"dir":1,"interval":14},{"bytes":530,"dir":2,"interval":86},{"bytes":31,"dir":1,"interval":30337}],"tls":{"version":"tls1.2","sni":"star.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52839,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":545,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52840,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":723,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52841,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":538,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52842,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":525,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52844,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":461,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52845,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":525,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52843,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":694,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52846,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":535,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52838,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1223,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52638,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1439,"s2c_bytes":276856,"c2s_pkts":4,"s2c_pkts":196,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":311,"dir":1,"interval":1180},{"bytes":1460,"dir":2,"interval":482},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1242,"dir":2,"interval":0},{"bytes":310,"dir":1,"interval":2296},{"bytes":1460,"dir":2,"interval":2260},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1379,"dir":2,"interval":0},{"bytes":301,"dir":1,"interval":24547},{"bytes":1460,"dir":2,"interval":24529},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"img-ys011.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52849,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":551,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52850,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":541,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52848,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":733,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52608,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":851,"s2c_bytes":6101,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":31228,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":8},{"bytes":303,"dir":1,"interval":342},{"bytes":1460,"dir":2,"interval":309},{"bytes":72,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30882}],"tls":{"version":"tls1.2","sni":"img-hxy021.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52569,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":1489,"s2c_bytes":6099,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":34119,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":39},{"bytes":126,"dir":1,"interval":2787},{"bytes":598,"dir":1,"interval":4},{"bytes":217,"dir":1,"interval":0},{"bytes":863,"dir":2,"interval":268},{"bytes":31,"dir":1,"interval":31290}],"tls":{"version":"tls1.2","sni":"thanos.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52591,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":1992,"s2c_bytes":8609,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":31745,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":39},{"bytes":126,"dir":1,"interval":442},{"bytes":1318,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":155},{"bytes":1460,"dir":2,"interval":0},{"bytes":469,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31258}],"tls":{"version":"tls1.2","sni":"ct.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52589,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":3210,"s2c_bytes":9848,"c2s_pkts":6,"s2c_pkts":10,"total_pkts":16,"duration":33034,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":385,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":126,"dir":1,"interval":497},{"bytes":1122,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":130},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":254,"dir":2,"interval":0},{"bytes":1088,"dir":1,"interval":1189},{"bytes":326,"dir":1,"interval":0},{"bytes":191,"dir":2,"interval":1260},{"bytes":31,"dir":1,"interval":31300}],"tls":{"version":"tls1.2","sni":"api.udache.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52854,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":667,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52852,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":773,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52851,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1013,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52853,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1018,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52847,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1438,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52855,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1229,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52597,"dip":"116.85.3.10","dport":443,"proto":"tcp","c2s_bytes":1030,"s2c_bytes":5818,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":32421,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":1031},{"bytes":356,"dir":1,"interval":794},{"bytes":613,"dir":2,"interval":1340},{"bytes":31,"dir":1,"interval":30561}],"tls":{"version":"tls1.2","sni":"star.xiaojukeji.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52564,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":2311,"s2c_bytes":4592,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":35052,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":39},{"bytes":126,"dir":1,"interval":2553},{"bytes":705,"dir":1,"interval":28},{"bytes":553,"dir":2,"interval":179},{"bytes":932,"dir":1,"interval":817},{"bytes":413,"dir":2,"interval":810},{"bytes":31,"dir":1,"interval":31616}],"tls":{"version":"tls1.2","sni":"common.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52595,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":1969,"s2c_bytes":5627,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":32472,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":40},{"bytes":126,"dir":1,"interval":1286},{"bytes":1295,"dir":1,"interval":803},{"bytes":391,"dir":2,"interval":1559},{"bytes":31,"dir":1,"interval":30343}],"tls":{"version":"tls1.2","sni":"transit.bus.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52856,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":925,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52859,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":744,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52858,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":806,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52860,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":804,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52864,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":442,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52865,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":520,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52602,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":2278,"s2c_bytes":8394,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":33188,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":1335},{"bytes":1064,"dir":1,"interval":546},{"bytes":540,"dir":1,"interval":88},{"bytes":1460,"dir":2,"interval":1523},{"bytes":1460,"dir":2,"interval":0},{"bytes":254,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31215}],"tls":{"version":"tls1.2","sni":"res.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52606,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":2024,"s2c_bytes":8595,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":33134,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":39},{"bytes":126,"dir":1,"interval":1492},{"bytes":1350,"dir":1,"interval":350},{"bytes":1460,"dir":2,"interval":1276},{"bytes":1460,"dir":2,"interval":0},{"bytes":470,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31288}],"tls":{"version":"tls1.2","sni":"ct.xiaojukeji.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52863,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1221,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52868,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":428,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52866,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":599,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52862,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1370,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52867,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":688,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52857,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1570,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52872,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":602,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52873,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":773,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52875,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":721,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52877,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":507,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52870,"dip":"116.85.3.10","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3581,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1159,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.10","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52618,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":2837,"s2c_bytes":9575,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":32131,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":912},{"bytes":1350,"dir":1,"interval":112},{"bytes":813,"dir":1,"interval":13},{"bytes":1460,"dir":2,"interval":462},{"bytes":1460,"dir":2,"interval":0},{"bytes":1450,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31067}],"tls":{"version":"tls1.2","sni":"res.xiaojukeji.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52612,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":2852,"s2c_bytes":16199,"c2s_pkts":10,"s2c_pkts":15,"total_pkts":25,"duration":33506,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":288,"dir":1,"interval":1908},{"bytes":931,"dir":2,"interval":409},{"bytes":288,"dir":1,"interval":105},{"bytes":1460,"dir":2,"interval":103},{"bytes":577,"dir":2,"interval":0},{"bytes":288,"dir":1,"interval":168},{"bytes":1264,"dir":2,"interval":192},{"bytes":288,"dir":1,"interval":216},{"bytes":1460,"dir":2,"interval":191},{"bytes":847,"dir":2,"interval":0},{"bytes":288,"dir":1,"interval":66},{"bytes":966,"dir":2,"interval":67},{"bytes":288,"dir":1,"interval":100},{"bytes":926,"dir":2,"interval":100},{"bytes":288,"dir":1,"interval":258},{"bytes":1460,"dir":2,"interval":258},{"bytes":799,"dir":2,"interval":0},{"bytes":288,"dir":1,"interval":254},{"bytes":925,"dir":2,"interval":293},{"bytes":31,"dir":1,"interval":30423}],"tls":{"version":"tls1.2","sni":"img-hxy021.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52620,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":2177,"s2c_bytes":8289,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":32131,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":917},{"bytes":1058,"dir":1,"interval":108},{"bytes":445,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":431},{"bytes":1460,"dir":2,"interval":0},{"bytes":164,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31084}],"tls":{"version":"tls1.2","sni":"res.xiaojukeji.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52619,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":2629,"s2c_bytes":8263,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":32131,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":40},{"bytes":126,"dir":1,"interval":921},{"bytes":1305,"dir":1,"interval":104},{"bytes":650,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":433},{"bytes":1460,"dir":2,"interval":0},{"bytes":138,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31085}],"tls":{"version":"tls1.2","sni":"res.xiaojukeji.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52621,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":1952,"s2c_bytes":5594,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":32125,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":911},{"bytes":1278,"dir":1,"interval":107},{"bytes":389,"dir":2,"interval":353},{"bytes":31,"dir":1,"interval":31086}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52622,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":1987,"s2c_bytes":7587,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":32126,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":911},{"bytes":1313,"dir":1,"interval":107},{"bytes":1460,"dir":2,"interval":351},{"bytes":922,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31086}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52631,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":1202,"s2c_bytes":5414,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31729,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":830},{"bytes":528,"dir":1,"interval":286},{"bytes":209,"dir":2,"interval":459},{"bytes":31,"dir":1,"interval":30599}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52634,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":1744,"s2c_bytes":5823,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":31612,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":657},{"bytes":523,"dir":1,"interval":257},{"bytes":309,"dir":2,"interval":399},{"bytes":547,"dir":1,"interval":254},{"bytes":309,"dir":2,"interval":254},{"bytes":31,"dir":1,"interval":30423}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52630,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":1202,"s2c_bytes":5414,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31729,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":830},{"bytes":528,"dir":1,"interval":286},{"bytes":209,"dir":2,"interval":459},{"bytes":31,"dir":1,"interval":30599}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52632,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":1194,"s2c_bytes":5414,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31729,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":835},{"bytes":520,"dir":1,"interval":313},{"bytes":209,"dir":2,"interval":490},{"bytes":31,"dir":1,"interval":30566}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52871,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1227,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52878,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":614,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52874,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1365,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52879,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":727,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52876,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1508,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52881,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":671,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52882,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":772,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52880,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1467,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52890,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":762,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52884,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":904,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52886,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":961,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52885,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52883,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1452,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52641,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":836,"s2c_bytes":5970,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":33568,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":288,"dir":1,"interval":2003},{"bytes":1401,"dir":2,"interval":755},{"bytes":31,"dir":1,"interval":31560}],"tls":{"version":"tls1.2","sni":"img-hxy021.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52643,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":836,"s2c_bytes":6562,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":33568,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":288,"dir":1,"interval":2003},{"bytes":1460,"dir":2,"interval":756},{"bytes":533,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31559}],"tls":{"version":"tls1.2","sni":"img-hxy021.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52642,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":836,"s2c_bytes":6200,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":33568,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":288,"dir":1,"interval":2003},{"bytes":1460,"dir":2,"interval":789},{"bytes":171,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31560}],"tls":{"version":"tls1.2","sni":"img-hxy021.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52639,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":4397,"s2c_bytes":6052,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":33693,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40},{"bytes":126,"dir":1,"interval":500},{"bytes":1256,"dir":1,"interval":61},{"bytes":272,"dir":2,"interval":131},{"bytes":1261,"dir":1,"interval":231},{"bytes":272,"dir":2,"interval":231},{"bytes":1206,"dir":1,"interval":2218},{"bytes":272,"dir":2,"interval":2219},{"bytes":31,"dir":1,"interval":30652}],"tls":{"version":"tls1.2","sni":"adtrack.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52600,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":2161,"s2c_bytes":10047,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":36419,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":41},{"bytes":126,"dir":1,"interval":1336},{"bytes":1452,"dir":1,"interval":547},{"bytes":35,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1430},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":431,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":34508}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52899,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":493,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52887,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1494,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52897,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":550,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52898,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":720,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52894,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":728,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52895,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":726,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52601,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":1862,"s2c_bytes":5924,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":36933,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":1335},{"bytes":594,"dir":1,"interval":546},{"bytes":352,"dir":2,"interval":1429},{"bytes":594,"dir":1,"interval":4371},{"bytes":352,"dir":2,"interval":4372},{"bytes":31,"dir":1,"interval":30643}],"tls":{"version":"tls1.2","sni":"as.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52893,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1195,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52647,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":850,"s2c_bytes":28888,"c2s_pkts":3,"s2c_pkts":22,"total_pkts":25,"duration":32865,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":302,"dir":1,"interval":1792},{"bytes":1460,"dir":2,"interval":1235},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":606,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31069}],"tls":{"version":"tls1.2","sni":"img-ys011.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52651,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":849,"s2c_bytes":53302,"c2s_pkts":3,"s2c_pkts":39,"total_pkts":42,"duration":32726,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1379,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":301,"dir":1,"interval":1707},{"bytes":1460,"dir":2,"interval":924},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":196,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31013}],"tls":{"version":"tls1.2","sni":"dpubstatic.udache.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52907,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":562,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52645,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":850,"s2c_bytes":61967,"c2s_pkts":3,"s2c_pkts":45,"total_pkts":48,"duration":32871,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":302,"dir":1,"interval":1792},{"bytes":1460,"dir":2,"interval":1253},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":105,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31076}],"tls":{"version":"tls1.2","sni":"img-ys011.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52896,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1194,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52554,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":3010,"s2c_bytes":10378,"c2s_pkts":6,"s2c_pkts":10,"total_pkts":16,"duration":40243,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":40},{"bytes":126,"dir":1,"interval":1023},{"bytes":766,"dir":1,"interval":5},{"bytes":535,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":152},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":729,"dir":2,"interval":0},{"bytes":1035,"dir":1,"interval":8052},{"bytes":183,"dir":2,"interval":7967},{"bytes":31,"dir":1,"interval":31154}],"tls":{"version":"tls1.2","sni":"epassport.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52557,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":7153,"s2c_bytes":6885,"c2s_pkts":10,"s2c_pkts":9,"total_pkts":19,"duration":40243,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":400,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":40},{"bytes":126,"dir":1,"interval":1029},{"bytes":1076,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":98},{"bytes":256,"dir":2,"interval":0},{"bytes":1095,"dir":1,"interval":97},{"bytes":700,"dir":2,"interval":87},{"bytes":1114,"dir":1,"interval":1646},{"bytes":226,"dir":1,"interval":0},{"bytes":207,"dir":2,"interval":1727},{"bytes":1452,"dir":1,"interval":6301},{"bytes":596,"dir":1,"interval":0},{"bytes":920,"dir":1,"interval":0},{"bytes":668,"dir":2,"interval":6219},{"bytes":31,"dir":1,"interval":31155}],"tls":{"version":"tls1.2","sni":"api.udache.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52908,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":632,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52911,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":508,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52909,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":724,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52892,"dip":"116.85.3.11","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3581,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1990,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.11","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52912,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":562,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52910,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":911,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52904,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1494,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52914,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1493,"s2c_bytes":286691,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":976,"dir":1,"interval":974},{"bytes":1460,"dir":2,"interval":182},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dpubstatic.udache.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52913,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1156,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52918,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":602,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52644,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":2826,"s2c_bytes":6486,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":34423,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":40},{"bytes":126,"dir":1,"interval":1797},{"bytes":814,"dir":1,"interval":220},{"bytes":165,"dir":1,"interval":0},{"bytes":670,"dir":2,"interval":1313},{"bytes":796,"dir":1,"interval":1365},{"bytes":377,"dir":1,"interval":0},{"bytes":611,"dir":2,"interval":1379},{"bytes":31,"dir":1,"interval":31008}],"tls":{"version":"tls1.2","sni":"hd.xiaojukeji.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52916,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":723,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52917,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":754,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52919,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":942,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52923,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":726,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52920,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1488,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52925,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":864,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52507,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":4366,"s2c_bytes":109602,"c2s_pkts":13,"s2c_pkts":88,"total_pkts":101,"duration":80914,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":561,"dir":2,"interval":0},{"bytes":239,"dir":2,"interval":2},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":242},{"bytes":58,"dir":1,"interval":31},{"bytes":352,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":113},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":106,"dir":2,"interval":0},{"bytes":393,"dir":1,"interval":570},{"bytes":1460,"dir":2,"interval":514},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":280,"dir":2,"interval":0},{"bytes":342,"dir":1,"interval":47},{"bytes":1460,"dir":2,"interval":45},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":562,"dir":2,"interval":0},{"bytes":394,"dir":1,"interval":797},{"bytes":1460,"dir":2,"interval":796},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":1764},{"bytes":1460,"dir":2,"interval":1820},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":425,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":2477},{"bytes":1460,"dir":2,"interval":2419},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":790,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":85},{"bytes":1460,"dir":2,"interval":87},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":488,"dir":2,"interval":0},{"bytes":352,"dir":1,"interval":457},{"bytes":1460,"dir":2,"interval":466},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1458,"dir":2,"interval":0},{"bytes":352,"dir":1,"interval":25725},{"bytes":1460,"dir":2,"interval":25719},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":278,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30259}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52928,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":846,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52922,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1233,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52924,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1210,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52927,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1272,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52929,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":652,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52932,"dip":"116.85.3.10","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3581,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":651,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.10","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52931,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":757,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52933,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":814,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52934,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1128,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52930,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1310,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52935,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":924,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52936,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":810,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52937,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":819,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52938,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":584,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52940,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":599,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52939,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":601,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52677,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":2989,"s2c_bytes":5704,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":31432,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":488},{"bytes":423,"dir":1,"interval":28},{"bytes":1452,"dir":1,"interval":3},{"bytes":440,"dir":1,"interval":0},{"bytes":468,"dir":2,"interval":193},{"bytes":31,"dir":1,"interval":30877}],"tls":{"version":"tls1.2","sni":"security.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52942,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":781,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52946,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":636,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52949,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":526,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52950,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":581,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52948,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":650,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52941,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1218,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52947,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":709,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52944,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1019,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52954,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":547,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52952,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":734,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52945,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1326,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52953,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":664,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52955,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":637,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52958,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":495,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52957,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":702,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52960,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":609,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52956,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1225,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52961,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":719,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52963,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":621,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52959,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1021,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52964,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":545,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52706,"dip":"203.187.160.136","dport":443,"proto":"tcp","c2s_bytes":1147,"s2c_bytes":181785,"c2s_pkts":4,"s2c_pkts":133,"total_pkts":137,"duration":30381,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":733,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":9},{"bytes":126,"dir":1,"interval":475},{"bytes":252,"dir":1,"interval":5},{"bytes":1448,"dir":2,"interval":69},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":120,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":180,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1320,"dir":2,"interval":0},{"bytes":252,"dir":1,"interval":9899},{"bytes":1448,"dir":2,"interval":9867},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":624,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":60,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":120,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":234,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"image.uczzd.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52703,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1384,"s2c_bytes":5245,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":30437,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":2},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":406},{"bytes":58,"dir":1,"interval":23},{"bytes":286,"dir":1,"interval":1},{"bytes":1215,"dir":2,"interval":102},{"bytes":24,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52966,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":602,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52962,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1331,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52969,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":599,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52967,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":998,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52970,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":754,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52965,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1192,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52971,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":648,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52972,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":611,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52977,"dip":"116.85.3.10","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3581,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":723,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":403,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.10","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52714,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":988,"s2c_bytes":5406,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30792,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":39},{"bytes":126,"dir":1,"interval":565},{"bytes":314,"dir":1,"interval":6},{"bytes":186,"dir":2,"interval":154},{"bytes":31,"dir":1,"interval":30216}],"tls":{"version":"tls1.2","sni":"apm.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52979,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":689,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52983,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":622,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52978,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":728,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52974,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":931,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52976,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":981,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52975,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1162,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52553,"dip":"116.85.3.3","dport":443,"proto":"tcp","c2s_bytes":49152,"s2c_bytes":12644,"c2s_pkts":57,"s2c_pkts":24,"total_pkts":81,"duration":49097,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":1018},{"bytes":265,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":67},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":153,"dir":2,"interval":0},{"bytes":387,"dir":1,"interval":1757},{"bytes":525,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":1857},{"bytes":366,"dir":1,"interval":3120},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1359,"dir":1,"interval":139},{"bytes":192,"dir":2,"interval":3164},{"bytes":366,"dir":1,"interval":1040},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":1192,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":1072},{"bytes":366,"dir":1,"interval":4811},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":248,"dir":1,"interval":1},{"bytes":192,"dir":2,"interval":4814},{"bytes":393,"dir":1,"interval":2956},{"bytes":474,"dir":1,"interval":2},{"bytes":192,"dir":2,"interval":3008},{"bytes":367,"dir":1,"interval":4366},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":222,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":4318},{"bytes":393,"dir":1,"interval":1023},{"bytes":482,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":1075},{"bytes":393,"dir":1,"interval":6995},{"bytes":490,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":6981},{"bytes":393,"dir":1,"interval":4658},{"bytes":495,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":4657},{"bytes":367,"dir":1,"interval":426},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":786,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":388},{"bytes":393,"dir":1,"interval":325},{"bytes":477,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":377},{"bytes":393,"dir":1,"interval":520},{"bytes":473,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":508},{"bytes":367,"dir":1,"interval":1320},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":844,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":1281},{"bytes":367,"dir":1,"interval":10277},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":5},{"bytes":1452,"dir":1,"interval":0},{"bytes":1243,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":10289},{"bytes":367,"dir":1,"interval":4220},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":9},{"bytes":1452,"dir":1,"interval":1},{"bytes":685,"dir":1,"interval":0},{"bytes":187,"dir":2,"interval":4232},{"bytes":31,"dir":1,"interval":87}],"tls":{"version":"tls1.2","sni":"omgup.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52985,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":568,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52984,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":594,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52986,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":700,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52988,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":934,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52991,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":583,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52990,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":683,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52989,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1036,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52973,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2246,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52996,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":511,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52995,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":570,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52992,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":836,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52993,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1030,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52994,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1069,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52543,"dip":"112.54.108.248","dport":443,"proto":"tcp","c2s_bytes":4166,"s2c_bytes":253539,"c2s_pkts":15,"s2c_pkts":185,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":26},{"bytes":126,"dir":1,"interval":3244},{"bytes":271,"dir":1,"interval":372},{"bytes":1460,"dir":2,"interval":2484},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":450,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2041},{"bytes":1460,"dir":2,"interval":2012},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":847,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":4542},{"bytes":1460,"dir":2,"interval":4642},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":11364},{"bytes":1460,"dir":2,"interval":11263},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3139},{"bytes":1460,"dir":2,"interval":3136},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":703,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3723},{"bytes":1460,"dir":2,"interval":3724},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":564,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3400},{"bytes":1460,"dir":2,"interval":3396},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":82,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3375},{"bytes":1460,"dir":2,"interval":3374},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":331,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3362},{"bytes":1460,"dir":2,"interval":3360},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1444,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":5919},{"bytes":1460,"dir":2,"interval":5917},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":74,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1407,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3224},{"bytes":1460,"dir":2,"interval":3222},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":975,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3779},{"bytes":1460,"dir":2,"interval":3776},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1331,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3032}],"tls":{"version":"tls1.2","sni":"g2.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52998,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":589,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53000,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":576,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52997,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1059,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53001,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":688,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53003,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":503,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53002,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":908,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53004,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":560,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53006,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":665,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53005,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52999,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1693,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53008,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":509,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53009,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":543,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53007,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":893,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53012,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":542,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53010,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1024,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53014,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":788,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53013,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1120,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53015,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":869,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53016,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":581,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53018,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":549,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53011,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1691,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53019,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":754,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53021,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":625,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53020,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1137,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52888,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":5521,"s2c_bytes":266895,"c2s_pkts":6,"s2c_pkts":194,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1379,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":856,"dir":1,"interval":922},{"bytes":1460,"dir":2,"interval":494},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":641,"dir":2,"interval":0},{"bytes":976,"dir":1,"interval":509},{"bytes":1460,"dir":2,"interval":170},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1334,"dir":2,"interval":0},{"bytes":927,"dir":1,"interval":7662},{"bytes":1460,"dir":2,"interval":7967},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":706,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":897,"dir":2,"interval":0},{"bytes":909,"dir":1,"interval":6656},{"bytes":1460,"dir":2,"interval":6494},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":821,"dir":2,"interval":0},{"bytes":1336,"dir":1,"interval":880},{"bytes":1460,"dir":2,"interval":562},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dpubstatic.udache.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53017,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1268,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53023,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":889,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53024,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":899,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52915,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":4412,"s2c_bytes":272901,"c2s_pkts":5,"s2c_pkts":195,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":976,"dir":1,"interval":957},{"bytes":1460,"dir":2,"interval":186},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":918,"dir":2,"interval":0},{"bytes":967,"dir":1,"interval":7112},{"bytes":693,"dir":2,"interval":7074},{"bytes":976,"dir":1,"interval":6208},{"bytes":1460,"dir":2,"interval":6215},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1108,"dir":2,"interval":0},{"bytes":976,"dir":1,"interval":881},{"bytes":1460,"dir":2,"interval":867},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dpubstatic.udache.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53029,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":994,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53026,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1000,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53025,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1784,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53030,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1131,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53027,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1615,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53035,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":994,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52902,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":7332,"s2c_bytes":269499,"c2s_pkts":8,"s2c_pkts":192,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1379,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":976,"dir":1,"interval":856},{"bytes":1460,"dir":2,"interval":51},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1221,"dir":2,"interval":0},{"bytes":967,"dir":1,"interval":7709},{"bytes":1460,"dir":2,"interval":7711},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1097,"dir":2,"interval":0},{"bytes":968,"dir":1,"interval":353},{"bytes":1460,"dir":2,"interval":348},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":704,"dir":2,"interval":0},{"bytes":976,"dir":1,"interval":6254},{"bytes":1460,"dir":2,"interval":6370},{"bytes":1460,"dir":2,"interval":0},{"bytes":777,"dir":2,"interval":0},{"bytes":976,"dir":1,"interval":241},{"bytes":1460,"dir":2,"interval":126},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1274,"dir":2,"interval":0},{"bytes":976,"dir":1,"interval":1263},{"bytes":1460,"dir":2,"interval":1329},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":775,"dir":2,"interval":0},{"bytes":976,"dir":1,"interval":678},{"bytes":1460,"dir":2,"interval":570},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dpubstatic.udache.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53042,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":820,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53039,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1495,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53041,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1576,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53044,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1278,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53045,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1486,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52788,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":929,"s2c_bytes":9898,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":32842,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":475,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":505},{"bytes":255,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":122},{"bytes":21,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":400,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32326}],"tls":{"version":"tls1.2","sni":"static.youku.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52809,"dip":"122.14.43.165","dport":443,"proto":"tcp","c2s_bytes":1023,"s2c_bytes":25146,"c2s_pkts":4,"s2c_pkts":19,"total_pkts":23,"duration":30562,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":249,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":277},{"bytes":349,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":160},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1311,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30273}],"tls":{"version":"tls1.2","sni":"image.9xsecndns.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52806,"dip":"122.14.43.165","dport":443,"proto":"tcp","c2s_bytes":1023,"s2c_bytes":31308,"c2s_pkts":4,"s2c_pkts":25,"total_pkts":29,"duration":30888,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":264,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":273},{"bytes":349,"dir":1,"interval":24},{"bytes":1460,"dir":2,"interval":191},{"bytes":1460,"dir":2,"interval":0},{"bytes":77,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":65,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30587}],"tls":{"version":"tls1.2","sni":"image.9xsecndns.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52783,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":3479,"s2c_bytes":131882,"c2s_pkts":12,"s2c_pkts":99,"total_pkts":111,"duration":33255,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":183},{"bytes":312,"dir":1,"interval":14},{"bytes":1460,"dir":2,"interval":40},{"bytes":1068,"dir":2,"interval":0},{"bytes":302,"dir":1,"interval":24},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":717,"dir":2,"interval":0},{"bytes":312,"dir":1,"interval":178},{"bytes":1460,"dir":2,"interval":156},{"bytes":789,"dir":2,"interval":0},{"bytes":317,"dir":1,"interval":19},{"bytes":1460,"dir":2,"interval":20},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":301,"dir":1,"interval":17},{"bytes":1460,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":0},{"bytes":74,"dir":2,"interval":0},{"bytes":203,"dir":2,"interval":0},{"bytes":317,"dir":1,"interval":43},{"bytes":1460,"dir":2,"interval":43},{"bytes":1258,"dir":2,"interval":0},{"bytes":313,"dir":1,"interval":1679},{"bytes":1460,"dir":2,"interval":1679},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1106,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":449},{"bytes":1460,"dir":2,"interval":523},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":502,"dir":2,"interval":0},{"bytes":313,"dir":1,"interval":362},{"bytes":1460,"dir":2,"interval":286},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":733,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30281}],"tls":{"version":"tls1.2","sni":"image.uc.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52777,"dip":"111.13.210.228","dport":443,"proto":"tcp","c2s_bytes":1685,"s2c_bytes":114312,"c2s_pkts":6,"s2c_pkts":83,"total_pkts":89,"duration":34043,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":192},{"bytes":337,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":96},{"bytes":1438,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":306,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":2748},{"bytes":1460,"dir":2,"interval":2702},{"bytes":1437,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1396,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":206},{"bytes":1460,"dir":2,"interval":237},{"bytes":1441,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":541,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30887}],"tls":{"version":"tls1.2","sni":"m.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52715,"dip":"111.13.210.228","dport":443,"proto":"tcp","c2s_bytes":3354,"s2c_bytes":165111,"c2s_pkts":11,"s2c_pkts":120,"total_pkts":131,"duration":41695,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":311},{"bytes":329,"dir":1,"interval":5},{"bytes":1460,"dir":2,"interval":47},{"bytes":1440,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":138,"dir":2,"interval":0},{"bytes":329,"dir":1,"interval":145},{"bytes":1460,"dir":2,"interval":157},{"bytes":1438,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":358,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":7089},{"bytes":1460,"dir":2,"interval":7084},{"bytes":1437,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":467,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":732},{"bytes":1460,"dir":2,"interval":813},{"bytes":1431,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":652,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":2311},{"bytes":1460,"dir":2,"interval":2194},{"bytes":1438,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":502,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":200},{"bytes":1460,"dir":2,"interval":211},{"bytes":1440,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1334,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":306},{"bytes":1460,"dir":2,"interval":382},{"bytes":1437,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1276,"dir":2,"interval":0},{"bytes":337,"dir":1,"interval":305},{"bytes":1441,"dir":2,"interval":246},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":571,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30282}],"tls":{"version":"tls1.2","sni":"m.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53046,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2569,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53047,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":988,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52813,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":1468,"s2c_bytes":83442,"c2s_pkts":5,"s2c_pkts":61,"total_pkts":66,"duration":31178,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":2},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":265},{"bytes":58,"dir":1,"interval":32},{"bytes":346,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":81},{"bytes":1460,"dir":2,"interval":0},{"bytes":64,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":532,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":30876}],"tls":{"version":"tls1.2","sni":"liangcang-material.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52812,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":987,"s2c_bytes":9931,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":31273,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":227,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":297},{"bytes":313,"dir":1,"interval":13},{"bytes":1460,"dir":2,"interval":162},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":718,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30959}],"tls":{"version":"tls1.2","sni":"image.uc.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53051,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1076,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53050,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1078,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53040,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":6316,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53038,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":8081,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53052,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":5128,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52649,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1159,"s2c_bytes":275364,"c2s_pkts":4,"s2c_pkts":193,"total_pkts":197,"duration":58464,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":302,"dir":1,"interval":1784},{"bytes":1460,"dir":2,"interval":1236},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1316,"dir":2,"interval":0},{"bytes":309,"dir":1,"interval":24559},{"bytes":1460,"dir":2,"interval":24553},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":887,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32115}],"tls":{"version":"tls1.2","sni":"img-ys011.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52599,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":2063,"s2c_bytes":32202,"c2s_pkts":7,"s2c_pkts":25,"total_pkts":32,"duration":63035,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":303,"dir":1,"interval":176},{"bytes":1460,"dir":2,"interval":52},{"bytes":1460,"dir":2,"interval":0},{"bytes":1439,"dir":2,"interval":0},{"bytes":303,"dir":1,"interval":12077},{"bytes":1460,"dir":2,"interval":12198},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1122,"dir":2,"interval":0},{"bytes":303,"dir":1,"interval":5616},{"bytes":1460,"dir":2,"interval":5621},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":77,"dir":2,"interval":0},{"bytes":303,"dir":1,"interval":6821},{"bytes":1460,"dir":2,"interval":6738},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1240,"dir":2,"interval":0},{"bytes":303,"dir":1,"interval":4606},{"bytes":1460,"dir":2,"interval":4574},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":380,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33733}],"tls":{"version":"tls1.2","sni":"img-hxy021.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53037,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":6193,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53068,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":123,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53063,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":829,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53060,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1000,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53067,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1045,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53062,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1100,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53056,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2011,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":0},{"bytes":566,"dir":2,"interval":39},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53070,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1662,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53066,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2488,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53069,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1807,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53071,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1461,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53065,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2493,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52665,"dip":"112.54.108.249","dport":443,"proto":"tcp","c2s_bytes":1487,"s2c_bytes":97773,"c2s_pkts":6,"s2c_pkts":72,"total_pkts":78,"duration":57078,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":20},{"bytes":126,"dir":1,"interval":238},{"bytes":271,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":47},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":711,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":22437},{"bytes":1460,"dir":2,"interval":22417},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":40,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3341},{"bytes":1460,"dir":2,"interval":3338},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":122,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30804}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52590,"dip":"116.85.2.22","dport":443,"proto":"tcp","c2s_bytes":3344,"s2c_bytes":5750,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":67179,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":404,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":37},{"bytes":126,"dir":1,"interval":2000},{"bytes":627,"dir":1,"interval":128},{"bytes":534,"dir":2,"interval":1121},{"bytes":680,"dir":1,"interval":10102},{"bytes":534,"dir":2,"interval":10101},{"bytes":682,"dir":1,"interval":12438},{"bytes":534,"dir":2,"interval":12440},{"bytes":681,"dir":1,"interval":4604},{"bytes":534,"dir":2,"interval":4602},{"bytes":31,"dir":1,"interval":33749}],"tls":{"version":"tls1.2","sni":"guard.sec.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52906,"dip":"182.254.53.234","dport":443,"proto":"tcp","c2s_bytes":4826,"s2c_bytes":89875,"c2s_pkts":6,"s2c_pkts":67,"total_pkts":73,"duration":30460,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1379,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":830,"dir":1,"interval":86},{"bytes":1460,"dir":2,"interval":76},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":502,"dir":2,"interval":0},{"bytes":835,"dir":1,"interval":821},{"bytes":1460,"dir":2,"interval":846},{"bytes":1460,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":853,"dir":1,"interval":7443},{"bytes":1460,"dir":2,"interval":7498},{"bytes":1460,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":885,"dir":1,"interval":6697},{"bytes":433,"dir":2,"interval":6609},{"bytes":906,"dir":1,"interval":14411},{"bytes":1460,"dir":2,"interval":14379},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":714,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static.udache.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52981,"dip":"182.254.53.234","dport":443,"proto":"tcp","c2s_bytes":2274,"s2c_bytes":50856,"c2s_pkts":3,"s2c_pkts":37,"total_pkts":40,"duration":22135,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":863,"dir":1,"interval":79},{"bytes":1460,"dir":2,"interval":54},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1197,"dir":2,"interval":0},{"bytes":894,"dir":1,"interval":20901},{"bytes":964,"dir":2,"interval":20863}],"tls":{"version":"tls1.2","sni":"static.udache.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53073,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2395,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52905,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1403,"s2c_bytes":18255,"c2s_pkts":3,"s2c_pkts":14,"total_pkts":17,"duration":31654,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":855,"dir":1,"interval":819},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":547,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30828}],"tls":{"version":"tls1.2","sni":"img6.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52903,"dip":"116.85.3.4","dport":443,"proto":"tcp","c2s_bytes":2642,"s2c_bytes":5641,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31691,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":623},{"bytes":963,"dir":1,"interval":5},{"bytes":1005,"dir":1,"interval":0},{"bytes":405,"dir":2,"interval":156},{"bytes":31,"dir":1,"interval":31044}],"tls":{"version":"tls1.2","sni":"omgup2.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52901,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":1466,"s2c_bytes":7644,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":32967,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":918,"dir":1,"interval":1925},{"bytes":1460,"dir":2,"interval":227},{"bytes":1460,"dir":2,"interval":0},{"bytes":140,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31036}],"tls":{"version":"tls1.2","sni":"img-hxy021.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53083,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1216,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53072,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1295,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53077,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1648,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52891,"dip":"122.14.43.43","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":36511,"c2s_pkts":5,"s2c_pkts":29,"total_pkts":34,"duration":35673,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":647},{"bytes":271,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":593},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":79,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2449},{"bytes":1460,"dir":2,"interval":2440},{"bytes":77,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1001,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32568}],"tls":{"version":"tls1.2","sni":"g3.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53082,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2831,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53074,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3190,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":3},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53086,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2202,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53085,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2202,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53054,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":3040,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52831,"dip":"122.14.43.43","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":16276,"c2s_pkts":5,"s2c_pkts":16,"total_pkts":21,"duration":43728,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":196},{"bytes":271,"dir":1,"interval":13},{"bytes":1460,"dir":2,"interval":96},{"bytes":83,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":566,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":12267},{"bytes":1460,"dir":2,"interval":12270},{"bytes":1460,"dir":2,"interval":0},{"bytes":78,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":482,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31249}],"tls":{"version":"tls1.2","sni":"g2.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52921,"dip":"182.254.52.222","dport":443,"proto":"tcp","c2s_bytes":1463,"s2c_bytes":5905,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":33988,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":915,"dir":1,"interval":1937},{"bytes":1336,"dir":2,"interval":295},{"bytes":31,"dir":1,"interval":32043}],"tls":{"version":"tls1.2","sni":"img-hxy021.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52740,"dip":"111.32.130.124","dport":443,"proto":"tcp","c2s_bytes":2029,"s2c_bytes":167865,"c2s_pkts":8,"s2c_pkts":123,"total_pkts":131,"duration":54112,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":24},{"bytes":126,"dir":1,"interval":766},{"bytes":271,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":56},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":670,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2789},{"bytes":1460,"dir":2,"interval":2740},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":882,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":6775},{"bytes":1460,"dir":2,"interval":6772},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":830,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3362},{"bytes":1460,"dir":2,"interval":3359},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":664,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":9143},{"bytes":1460,"dir":2,"interval":9140},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":552,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31249}],"tls":{"version":"tls1.2","sni":"g2.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53092,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":739,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53048,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":18036,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53088,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1761,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53089,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1762,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52968,"dip":"116.85.2.22","dport":443,"proto":"tcp","c2s_bytes":1462,"s2c_bytes":5158,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31570,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":392,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":424},{"bytes":788,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":70},{"bytes":112,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31130}],"tls":{"version":"tls1.2","sni":"z.didi.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53091,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2673,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53093,"dip":"31.13.82.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3395,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":2698,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1363,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52664,"dip":"112.54.108.249","dport":443,"proto":"tcp","c2s_bytes":2571,"s2c_bytes":152815,"c2s_pkts":10,"s2c_pkts":109,"total_pkts":119,"duration":67352,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":19},{"bytes":126,"dir":1,"interval":231},{"bytes":271,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":46},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":430,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":2776},{"bytes":1460,"dir":2,"interval":2757},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1117,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3563},{"bytes":1460,"dir":2,"interval":3572},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1295,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":9982},{"bytes":1460,"dir":2,"interval":9972},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":765,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":6097},{"bytes":1460,"dir":2,"interval":6095},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1338,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3363},{"bytes":1460,"dir":2,"interval":3362},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1383,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":9693},{"bytes":1460,"dir":2,"interval":9693},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":778,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":702,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31632}],"tls":{"version":"tls1.2","sni":"g1.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52987,"dip":"182.254.48.108","dport":443,"proto":"tcp","c2s_bytes":1475,"s2c_bytes":25069,"c2s_pkts":3,"s2c_pkts":19,"total_pkts":22,"duration":30333,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1375,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":927,"dir":1,"interval":120},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1167,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30208}],"tls":{"version":"tls1.2","sni":"tracker.didistatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52982,"dip":"182.254.53.234","dport":443,"proto":"tcp","c2s_bytes":1478,"s2c_bytes":7161,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":31086,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":930,"dir":1,"interval":80},{"bytes":1460,"dir":2,"interval":37},{"bytes":1086,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30995},{"bytes":31,"dir":2,"interval":30976}],"tls":{"version":"tls1.2","sni":"webapp.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52980,"dip":"116.85.3.3","dport":443,"proto":"tcp","c2s_bytes":2682,"s2c_bytes":5641,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31090,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":547},{"bytes":981,"dir":1,"interval":52},{"bytes":1027,"dir":1,"interval":0},{"bytes":405,"dir":2,"interval":243},{"bytes":31,"dir":1,"interval":30480}],"tls":{"version":"tls1.2","sni":"omgup1.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53081,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":7983,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53109,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":492,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53110,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":652,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53113,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":503,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53111,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1234,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53098,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2657,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53114,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":595,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53096,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1787,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":0},{"bytes":562,"dir":2,"interval":38},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53105,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1848,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52716,"dip":"111.32.130.118","dport":443,"proto":"tcp","c2s_bytes":2029,"s2c_bytes":133193,"c2s_pkts":8,"s2c_pkts":99,"total_pkts":107,"duration":63078,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":406},{"bytes":271,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":72},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":399,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":6144},{"bytes":1460,"dir":2,"interval":6137},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1377,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":13557},{"bytes":1460,"dir":2,"interval":13555},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":70,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":885,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3217},{"bytes":1460,"dir":2,"interval":3215},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":423,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":791,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":9560},{"bytes":1460,"dir":2,"interval":9549},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":985,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30181}],"tls":{"version":"tls1.2","sni":"g3.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53115,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":533,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53117,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1520,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53122,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1059,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53112,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2769,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53099,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1854,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53119,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1763,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53121,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1558,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53126,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":788,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53127,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":851,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53124,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1564,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53128,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2004,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52951,"dip":"122.14.43.43","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":51591,"c2s_pkts":5,"s2c_pkts":39,"total_pkts":44,"duration":41851,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":296},{"bytes":271,"dir":1,"interval":28},{"bytes":1460,"dir":2,"interval":283},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":61,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":9227},{"bytes":1460,"dir":2,"interval":9224},{"bytes":1460,"dir":2,"interval":0},{"bytes":81,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32296}],"tls":{"version":"tls1.2","sni":"g4.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53134,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2601,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53031,"dip":"116.85.3.3","dport":443,"proto":"tcp","c2s_bytes":2640,"s2c_bytes":5641,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31781,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42},{"bytes":126,"dir":1,"interval":1264},{"bytes":962,"dir":1,"interval":20},{"bytes":1004,"dir":1,"interval":0},{"bytes":405,"dir":2,"interval":675},{"bytes":31,"dir":1,"interval":30493}],"tls":{"version":"tls1.2","sni":"omgup.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53033,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":1410,"s2c_bytes":28045,"c2s_pkts":3,"s2c_pkts":21,"total_pkts":24,"duration":31782,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":862,"dir":1,"interval":1285},{"bytes":1460,"dir":2,"interval":502},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1208,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30494}],"tls":{"version":"tls1.2","sni":"img-ys011.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52943,"dip":"182.254.48.108","dport":443,"proto":"tcp","c2s_bytes":3240,"s2c_bytes":28055,"c2s_pkts":5,"s2c_pkts":22,"total_pkts":27,"duration":43720,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1390,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":891,"dir":1,"interval":219},{"bytes":1460,"dir":2,"interval":93},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":605,"dir":2,"interval":0},{"bytes":909,"dir":1,"interval":4643},{"bytes":1460,"dir":2,"interval":4642},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":605,"dir":2,"interval":0},{"bytes":892,"dir":1,"interval":7661},{"bytes":1460,"dir":2,"interval":7672},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":361,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31190}],"tls":{"version":"tls1.2","sni":"tracker.didistatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53133,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4451,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53131,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4664,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53129,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":130,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53130,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4239,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53159,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":137,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53141,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2037,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52754,"dip":"112.54.108.244","dport":443,"proto":"tcp","c2s_bytes":2571,"s2c_bytes":238840,"c2s_pkts":10,"s2c_pkts":176,"total_pkts":186,"duration":67109,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":241,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":18},{"bytes":126,"dir":1,"interval":873},{"bytes":271,"dir":1,"interval":7},{"bytes":1460,"dir":2,"interval":79},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":376,"dir":2,"interval":15},{"bytes":271,"dir":1,"interval":4301},{"bytes":1460,"dir":2,"interval":4456},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":788,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3581},{"bytes":1460,"dir":2,"interval":3390},{"bytes":1460,"dir":2,"interval":0},{"bytes":74,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":888,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":13509},{"bytes":1460,"dir":2,"interval":13507},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":106,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3394},{"bytes":1460,"dir":2,"interval":3392},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":833,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":6202},{"bytes":1460,"dir":2,"interval":6198},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":426,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":811,"dir":2,"interval":0},{"bytes":271,"dir":1,"interval":3823},{"bytes":1460,"dir":2,"interval":3820},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31391}],"tls":{"version":"tls1.2","sni":"g4.ykimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53154,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":2256,"s2c_bytes":91027,"c2s_pkts":3,"s2c_pkts":74,"total_pkts":77,"duration":3212,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":828,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1163,"dir":1,"interval":2887},{"bytes":576,"dir":1,"interval":-30},{"bytes":1260,"dir":2,"interval":1354},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":2},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":2},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":1},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":1},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":1},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":1},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":1},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":481,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52869,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":3836,"s2c_bytes":6270,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":53953,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":392,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":1922},{"bytes":791,"dir":1,"interval":8},{"bytes":659,"dir":2,"interval":150},{"bytes":790,"dir":1,"interval":9279},{"bytes":677,"dir":2,"interval":9279},{"bytes":790,"dir":1,"interval":6666},{"bytes":659,"dir":2,"interval":6666},{"bytes":791,"dir":1,"interval":5985},{"bytes":689,"dir":2,"interval":5986},{"bytes":31,"dir":1,"interval":30082}],"tls":{"version":"tls1.2","sni":"s.didi.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53153,"dip":"183.84.18.8","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4019,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":3776,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":433,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":2888},{"bytes":358,"dir":1,"interval":881},{"bytes":401,"dir":2,"interval":1939},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53149,"dip":"211.159.232.169","dport":443,"proto":"tcp","c2s_bytes":1378,"s2c_bytes":4242,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":3798,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":794,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":377,"dir":1,"interval":2904},{"bytes":484,"dir":1,"interval":880},{"bytes":590,"dir":2,"interval":1826},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tongs.ke.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53137,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":1438,"s2c_bytes":4186,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":3800,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":431,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":534,"dir":1,"interval":2905},{"bytes":387,"dir":1,"interval":880},{"bytes":512,"dir":2,"interval":1947},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53147,"dip":"183.84.18.9","dport":443,"proto":"tcp","c2s_bytes":1124,"s2c_bytes":4344,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":3817,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":455,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":607,"dir":1,"interval":3811},{"bytes":655,"dir":2,"interval":932},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ab.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53168,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":954,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53166,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":954,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53155,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":1315,"s2c_bytes":5218,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":3836,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":300,"dir":1,"interval":2888},{"bytes":467,"dir":1,"interval":880},{"bytes":994,"dir":2,"interval":1954},{"bytes":31,"dir":1,"interval":64},{"bytes":31,"dir":2,"interval":44}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53156,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":1195,"s2c_bytes":4583,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":3837,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":51,"dir":2,"interval":0},{"bytes":300,"dir":1,"interval":2889},{"bytes":347,"dir":1,"interval":880},{"bytes":359,"dir":2,"interval":1949},{"bytes":31,"dir":1,"interval":64},{"bytes":31,"dir":2,"interval":46}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53142,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":1075,"s2c_bytes":4869,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":3869,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":5},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":29},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":305,"dir":1,"interval":2906},{"bytes":222,"dir":1,"interval":880},{"bytes":676,"dir":2,"interval":1906},{"bytes":31,"dir":1,"interval":67}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53170,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1038,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53138,"dip":"211.159.232.169","dport":443,"proto":"tcp","c2s_bytes":1354,"s2c_bytes":4242,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":3926,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":794,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":385,"dir":1,"interval":3864},{"bytes":452,"dir":1,"interval":0},{"bytes":590,"dir":2,"interval":129},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tongs.ke.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53171,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":161,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":47}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53194,"dip":"45.40.218.87","dport":443,"proto":"tcp","c2s_bytes":2093,"s2c_bytes":4083,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":189,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":490,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":427,"dir":1,"interval":95},{"bytes":1149,"dir":1,"interval":0},{"bytes":446,"dir":2,"interval":115},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"iossec.ke.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53192,"dip":"153.37.235.69","dport":443,"proto":"tcp","c2s_bytes":1315,"s2c_bytes":5193,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":540,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":25},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":300,"dir":1,"interval":438},{"bytes":467,"dir":1,"interval":0},{"bytes":1000,"dir":2,"interval":119},{"bytes":31,"dir":1,"interval":98}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53148,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3359,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53165,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3447,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53195,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1320,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53179,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1786,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53185,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1833,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53193,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1782,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53176,"dip":"183.84.18.8","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4004,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":1981,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":1932},{"bytes":358,"dir":1,"interval":0},{"bytes":401,"dir":2,"interval":93},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53177,"dip":"183.84.18.8","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4004,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":1986,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":1936},{"bytes":358,"dir":1,"interval":0},{"bytes":401,"dir":2,"interval":98},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53178,"dip":"183.84.18.8","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4004,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":1987,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":585,"dir":1,"interval":1936},{"bytes":358,"dir":1,"interval":0},{"bytes":401,"dir":2,"interval":99},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53183,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1656,"s2c_bytes":4787,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2051,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":828,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1139,"dir":1,"interval":2021},{"bytes":1116,"dir":2,"interval":69},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53174,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1655,"s2c_bytes":4675,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2142,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1138,"dir":1,"interval":2111},{"bytes":1004,"dir":2,"interval":63},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53173,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1627,"s2c_bytes":4431,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2154,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1110,"dir":1,"interval":2110},{"bytes":760,"dir":2,"interval":75},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53100,"dip":"17.248.161.71","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3665,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":6487,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1306,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":72}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53191,"dip":"183.84.18.9","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4004,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":2667,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":2619},{"bytes":358,"dir":1,"interval":0},{"bytes":401,"dir":2,"interval":272},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53190,"dip":"183.84.18.9","dport":443,"proto":"tcp","c2s_bytes":1124,"s2c_bytes":4329,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2715,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":440,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":607,"dir":1,"interval":2707},{"bytes":655,"dir":2,"interval":319},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ab.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53202,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1010,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53198,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1454,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53199,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1821,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53200,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1873,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53208,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":780,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53197,"dip":"211.159.232.169","dport":443,"proto":"tcp","c2s_bytes":6356,"s2c_bytes":4109,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":3083,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":409,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":426,"dir":1,"interval":3039},{"bytes":1452,"dir":1,"interval":5},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1057,"dir":1,"interval":1},{"bytes":442,"dir":2,"interval":128},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tongs.ke.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53203,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1970,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":3},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53206,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1671,"s2c_bytes":4720,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2143,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1154,"dir":1,"interval":2119},{"bytes":1049,"dir":2,"interval":79},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53201,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2629,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53205,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":2260,"s2c_bytes":43242,"c2s_pkts":3,"s2c_pkts":34,"total_pkts":37,"duration":2344,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1163,"dir":1,"interval":2173},{"bytes":580,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":215},{"bytes":228,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":487,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":32,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53209,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1476,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53212,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1114,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53207,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1656,"s2c_bytes":4811,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2827,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1139,"dir":1,"interval":2765},{"bytes":1140,"dir":2,"interval":84},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53175,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":2219,"s2c_bytes":5124,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":3128,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1183,"dir":1,"interval":3001},{"bytes":519,"dir":1,"interval":0},{"bytes":1453,"dir":2,"interval":139},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53210,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1802,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53211,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1814,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53213,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1698,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53214,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1777,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53219,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1076,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53218,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1198,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53215,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1410,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53220,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1645,"s2c_bytes":4438,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2291,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1128,"dir":1,"interval":2259},{"bytes":767,"dir":2,"interval":74},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53216,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1643,"s2c_bytes":8522,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":2495,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1126,"dir":1,"interval":2445},{"bytes":1460,"dir":2,"interval":91},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":471,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53217,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1643,"s2c_bytes":8518,"c2s_pkts":2,"s2c_pkts":9,"total_pkts":11,"duration":2495,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1126,"dir":1,"interval":2438},{"bytes":1460,"dir":2,"interval":91},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":467,"dir":2,"interval":0},{"bytes":65,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53222,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1683,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53224,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1408,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53223,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1738,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53221,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2459,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53225,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1800,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53227,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":1315,"s2c_bytes":5193,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":809,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":35},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":300,"dir":1,"interval":662},{"bytes":467,"dir":1,"interval":0},{"bytes":1000,"dir":2,"interval":451},{"bytes":31,"dir":1,"interval":125}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53055,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":1560,"s2c_bytes":7551,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":33501,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":0},{"bytes":566,"dir":2,"interval":36},{"bytes":290,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":416},{"bytes":886,"dir":1,"interval":599},{"bytes":1460,"dir":2,"interval":910},{"bytes":855,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32480}],"tls":{"version":"tls1.2","sni":"gsactivity.diditaxi.com.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53232,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":833,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53231,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1381,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53235,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":845,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53226,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":4116,"s2c_bytes":4062,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":3396,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":816,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":856,"dir":1,"interval":3387},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":695,"dir":1,"interval":0},{"bytes":437,"dir":2,"interval":26},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53233,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1667,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53229,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1616,"s2c_bytes":35504,"c2s_pkts":2,"s2c_pkts":27,"total_pkts":29,"duration":2396,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1099,"dir":1,"interval":2108},{"bytes":1460,"dir":2,"interval":295},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":181,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1057,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53228,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1616,"s2c_bytes":36616,"c2s_pkts":2,"s2c_pkts":28,"total_pkts":30,"duration":2522,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1099,"dir":1,"interval":2211},{"bytes":1460,"dir":2,"interval":344},{"bytes":1460,"dir":2,"interval":0},{"bytes":216,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53236,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":859,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"poi.map.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53234,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1642,"s2c_bytes":4761,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2198,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":828,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1125,"dir":1,"interval":2180},{"bytes":1090,"dir":2,"interval":64},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53239,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":895,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53237,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1546,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53245,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":470,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53241,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":978,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52352,"dip":"106.11.211.206","dport":443,"proto":"tcp","c2s_bytes":3498,"s2c_bytes":22802,"c2s_pkts":11,"s2c_pkts":27,"total_pkts":38,"duration":201098,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":1},{"bytes":1452,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":112},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":551,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":50},{"bytes":1429,"dir":2,"interval":13},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":622,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":483,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":6},{"bytes":150,"dir":1,"interval":1672},{"bytes":404,"dir":1,"interval":0},{"bytes":200,"dir":2,"interval":1734},{"bytes":38,"dir":2,"interval":0},{"bytes":977,"dir":1,"interval":243},{"bytes":1429,"dir":2,"interval":166},{"bytes":675,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":112,"dir":1,"interval":18291},{"bytes":604,"dir":1,"interval":0},{"bytes":106,"dir":2,"interval":18335},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"appsdk.soku.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53242,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1355,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53240,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1588,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53243,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1525,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53246,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":888,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53238,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":2405,"s2c_bytes":19989,"c2s_pkts":3,"s2c_pkts":27,"total_pkts":30,"duration":2289,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":536,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1452,"dir":1,"interval":1891},{"bytes":436,"dir":1,"interval":0},{"bytes":1166,"dir":2,"interval":505},{"bytes":1400,"dir":2,"interval":0},{"bytes":303,"dir":2,"interval":0},{"bytes":465,"dir":2,"interval":0},{"bytes":158,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":386,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":316,"dir":2,"interval":0},{"bytes":756,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":1},{"bytes":615,"dir":2,"interval":0},{"bytes":739,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":1099,"dir":2,"interval":0},{"bytes":482,"dir":2,"interval":0},{"bytes":646,"dir":2,"interval":0},{"bytes":890,"dir":2,"interval":0},{"bytes":97,"dir":2,"interval":0},{"bytes":173,"dir":2,"interval":0},{"bytes":1024,"dir":2,"interval":0},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53247,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":977,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53244,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2301,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53251,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":925,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53248,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1266,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53252,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":889,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53249,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1544,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53250,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1498,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53258,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":984,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53261,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":880,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53260,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1274,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53075,"dip":"182.254.53.234","dport":443,"proto":"tcp","c2s_bytes":1440,"s2c_bytes":101650,"c2s_pkts":3,"s2c_pkts":72,"total_pkts":75,"duration":33713,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":892,"dir":1,"interval":375},{"bytes":1460,"dir":2,"interval":344},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":395,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33333}],"tls":{"version":"tls1.2","sni":"static.udache.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53264,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":736,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53262,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1470,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53263,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1436,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53265,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":764,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53266,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":821,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53268,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":435,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53259,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2240,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53032,"dip":"182.254.52.233","dport":443,"proto":"tcp","c2s_bytes":3506,"s2c_bytes":198790,"c2s_pkts":5,"s2c_pkts":146,"total_pkts":151,"duration":50783,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":976,"dir":1,"interval":1285},{"bytes":1460,"dir":2,"interval":580},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":784,"dir":2,"interval":0},{"bytes":976,"dir":1,"interval":1007},{"bytes":1460,"dir":2,"interval":941},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":35},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":34},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1374,"dir":2,"interval":0},{"bytes":1006,"dir":1,"interval":18251},{"bytes":1460,"dir":2,"interval":18253},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":204,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30232}],"tls":{"version":"tls1.2","sni":"dpubstatic.udache.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53267,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1280,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":44}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53269,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1466,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53273,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":499,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53270,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1352,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53272,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1207,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53278,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":747,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53271,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2130,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":45}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53076,"dip":"182.254.53.234","dport":443,"proto":"tcp","c2s_bytes":2313,"s2c_bytes":56113,"c2s_pkts":4,"s2c_pkts":42,"total_pkts":46,"duration":36833,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":889,"dir":1,"interval":375},{"bytes":1460,"dir":2,"interval":349},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":787,"dir":2,"interval":0},{"bytes":876,"dir":1,"interval":4154},{"bytes":1460,"dir":2,"interval":4251},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":438,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32299}],"tls":{"version":"tls1.2","sni":"static.udache.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53280,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":672,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53274,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1721,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53277,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1358,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53279,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1130,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53275,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1784,"s2c_bytes":4484,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2099,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":443,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1267,"dir":1,"interval":2030},{"bytes":798,"dir":2,"interval":104},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53282,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":694,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53283,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":710,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53286,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":467,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53287,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":891,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53288,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":633,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53289,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":786,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53285,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1335,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53276,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":3656,"s2c_bytes":4076,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":3247,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":934,"dir":1,"interval":3217},{"bytes":1452,"dir":1,"interval":9},{"bytes":596,"dir":1,"interval":11},{"bytes":157,"dir":1,"interval":0},{"bytes":436,"dir":2,"interval":109},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53284,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1663,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53281,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2018,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53291,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1102,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53292,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":844,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53290,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1370,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53295,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":452,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53293,"dip":"116.85.2.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1268,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.2.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53297,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":910,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53296,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1046,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53118,"dip":"52.81.13.52","dport":443,"proto":"tcp","c2s_bytes":1766,"s2c_bytes":5299,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":30233,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":4},{"bytes":314,"dir":1,"interval":82},{"bytes":904,"dir":1,"interval":1},{"bytes":200,"dir":2,"interval":66},{"bytes":31,"dir":1,"interval":30145},{"bytes":31,"dir":2,"interval":30100}],"tls":{"version":"tls1.2","sni":"log.trackingio.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53120,"dip":"52.81.13.52","dport":443,"proto":"tcp","c2s_bytes":1794,"s2c_bytes":5299,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":30141,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":1},{"bytes":51,"dir":2,"interval":4},{"bytes":314,"dir":1,"interval":71},{"bytes":932,"dir":1,"interval":0},{"bytes":200,"dir":2,"interval":61},{"bytes":31,"dir":1,"interval":30066},{"bytes":31,"dir":2,"interval":30020}],"tls":{"version":"tls1.2","sni":"log.trackingio.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53294,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1558,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53301,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":463,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53298,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1362,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52358,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":962,"s2c_bytes":5757,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":210991,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":829,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":918},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":136,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":318},{"bytes":38,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":62},{"bytes":84,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":210000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mos.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52359,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":963,"s2c_bytes":5445,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":210991,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":918},{"bytes":53,"dir":1,"interval":13},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":137,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":316},{"bytes":38,"dir":1,"interval":3},{"bytes":1230,"dir":2,"interval":57},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":210000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mos.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52360,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":962,"s2c_bytes":5665,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":210990,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":916},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":136,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":321},{"bytes":38,"dir":1,"interval":7},{"bytes":1450,"dir":2,"interval":62},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":210000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mos.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52361,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":963,"s2c_bytes":5517,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":210992,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":829,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":916},{"bytes":53,"dir":1,"interval":14},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":137,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":328},{"bytes":1304,"dir":2,"interval":57},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":210000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mos.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52357,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":961,"s2c_bytes":5832,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":210998,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":830,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":922},{"bytes":53,"dir":1,"interval":13},{"bytes":50,"dir":1,"interval":1},{"bytes":42,"dir":1,"interval":0},{"bytes":135,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":283},{"bytes":38,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":58},{"bytes":158,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":210000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mos.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52362,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":963,"s2c_bytes":5638,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":210994,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":916},{"bytes":53,"dir":1,"interval":13},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":137,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":338},{"bytes":38,"dir":1,"interval":2},{"bytes":1423,"dir":2,"interval":61},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":210000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mos.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52355,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":963,"s2c_bytes":5691,"c2s_pkts":7,"s2c_pkts":11,"total_pkts":18,"duration":211000,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":829,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":923},{"bytes":53,"dir":1,"interval":13},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":137,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":325},{"bytes":38,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":62},{"bytes":18,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":210000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mos.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52356,"dip":"122.14.43.173","dport":443,"proto":"tcp","c2s_bytes":965,"s2c_bytes":5593,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":210999,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":830,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":921},{"bytes":53,"dir":1,"interval":14},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":139,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":282},{"bytes":38,"dir":1,"interval":4},{"bytes":1379,"dir":2,"interval":61},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":210000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mos.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53299,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":903,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53300,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1084,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53304,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":614,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53305,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":626,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52364,"dip":"122.14.43.189","dport":443,"proto":"tcp","c2s_bytes":1524,"s2c_bytes":6396,"c2s_pkts":9,"s2c_pkts":13,"total_pkts":22,"duration":210718,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":422},{"bytes":58,"dir":1,"interval":244},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":181,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":404},{"bytes":563,"dir":2,"interval":2},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33},{"bytes":90,"dir":1,"interval":12},{"bytes":1460,"dir":2,"interval":43},{"bytes":177,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":210000},{"bytes":24,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wvcfg.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53302,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1553,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53307,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":579,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53303,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1299,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53306,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":977,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53310,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":424,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53311,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":631,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53143,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":2596,"s2c_bytes":7533,"c2s_pkts":6,"s2c_pkts":14,"total_pkts":20,"duration":27125,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":14},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":34},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":2906},{"bytes":263,"dir":1,"interval":880},{"bytes":676,"dir":2,"interval":1893},{"bytes":353,"dir":1,"interval":87},{"bytes":263,"dir":1,"interval":0},{"bytes":676,"dir":2,"interval":123},{"bytes":847,"dir":1,"interval":8209},{"bytes":1460,"dir":2,"interval":8179},{"bytes":497,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":15000}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53313,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":853,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53314,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":961,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53315,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":538,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53312,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1261,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53123,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":1221,"s2c_bytes":5545,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":31870,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":37},{"bytes":126,"dir":1,"interval":1462},{"bytes":547,"dir":1,"interval":4},{"bytes":309,"dir":2,"interval":184},{"bytes":31,"dir":1,"interval":30387}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53309,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53308,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2021,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53318,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":560,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53317,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":764,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53319,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":941,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53323,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":414,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53316,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1607,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53320,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1177,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53324,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":813,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53321,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1400,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53325,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":622,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53327,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":991,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53254,"dip":"104.17.64.4","dport":443,"proto":"tcp","c2s_bytes":1582,"s2c_bytes":3580,"c2s_pkts":8,"s2c_pkts":4,"total_pkts":12,"duration":15124,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":100,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":198},{"bytes":58,"dir":1,"interval":22},{"bytes":46,"dir":1,"interval":29},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":278,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"cdnjs.cloudflare.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53330,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1956,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53326,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2539,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53332,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":124,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53329,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2742,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53328,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2797,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53132,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":1197,"s2c_bytes":5514,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":35200,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":835,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":4446},{"bytes":523,"dir":1,"interval":9},{"bytes":309,"dir":2,"interval":1869},{"bytes":31,"dir":1,"interval":30741}],"tls":{"version":"tls1.2","sni":"conf.diditaxi.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53333,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":919,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53331,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":921,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53339,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1832,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53322,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":6233,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53136,"dip":"106.117.213.223","dport":443,"proto":"tcp","c2s_bytes":936,"s2c_bytes":4466,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":34322,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":836,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":18},{"bytes":126,"dir":1,"interval":2873},{"bytes":262,"dir":1,"interval":31},{"bytes":434,"dir":2,"interval":1095},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31411}],"tls":{"version":"tls1.2","sni":"www.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53336,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2654,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53342,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1602,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53341,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1724,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53337,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2669,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53340,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1846,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":44}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53344,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":512,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53022,"dip":"116.85.3.3","dport":443,"proto":"tcp","c2s_bytes":21962,"s2c_bytes":6004,"c2s_pkts":25,"s2c_pkts":9,"total_pkts":34,"duration":67736,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":777},{"bytes":367,"dir":1,"interval":98},{"bytes":1452,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":1508},{"bytes":1200,"dir":1,"interval":18},{"bytes":1200,"dir":1,"interval":0},{"bytes":395,"dir":1,"interval":2},{"bytes":192,"dir":2,"interval":1908},{"bytes":367,"dir":1,"interval":1007},{"bytes":1200,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":18},{"bytes":1035,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":1063},{"bytes":367,"dir":1,"interval":22671},{"bytes":1200,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":778},{"bytes":1200,"dir":1,"interval":-534},{"bytes":1200,"dir":1,"interval":0},{"bytes":844,"dir":1,"interval":3},{"bytes":192,"dir":2,"interval":23416},{"bytes":367,"dir":1,"interval":2070},{"bytes":1200,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":27},{"bytes":494,"dir":1,"interval":0},{"bytes":192,"dir":2,"interval":1616},{"bytes":31,"dir":1,"interval":30804}],"tls":{"version":"tls1.2","sni":"omgup.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53349,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":639,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53346,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":754,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53347,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":842,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53343,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1514,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53350,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1021,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53352,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":728,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.2.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53351,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":836,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53345,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1846,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53348,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1737,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53353,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":901,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53355,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":836,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53354,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1246,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53358,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2334,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53356,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3028,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53361,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1840,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53359,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2276,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53360,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1914,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53364,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":976,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53357,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":4006,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53366,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":965,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53365,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1600,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53369,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1065,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53363,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1732,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53255,"dip":"182.18.17.20","dport":443,"proto":"tcp","c2s_bytes":1559,"s2c_bytes":8251,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":25208,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":577,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":3},{"bytes":287,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":107},{"bytes":58,"dir":1,"interval":62},{"bytes":461,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":170},{"bytes":1448,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s1.ljcdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53253,"dip":"182.18.17.20","dport":443,"proto":"tcp","c2s_bytes":1568,"s2c_bytes":85852,"c2s_pkts":4,"s2c_pkts":63,"total_pkts":67,"duration":25208,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":573,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":10},{"bytes":271,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":108},{"bytes":58,"dir":1,"interval":60},{"bytes":470,"dir":1,"interval":1},{"bytes":1448,"dir":2,"interval":171},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1434,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":289,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s3.ljcdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53334,"dip":"104.17.64.4","dport":443,"proto":"tcp","c2s_bytes":1759,"s2c_bytes":3581,"c2s_pkts":8,"s2c_pkts":4,"total_pkts":12,"duration":9454,"packets":[{"bytes":589,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":628,"dir":1,"interval":2663},{"bytes":58,"dir":1,"interval":14},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":278,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"cdnjs.cloudflare.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":53257,"dip":"182.18.17.20","dport":443,"proto":"tcp","c2s_bytes":1614,"s2c_bytes":234262,"c2s_pkts":4,"s2c_pkts":164,"total_pkts":168,"duration":25013,"packets":[{"bytes":525,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":562,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":4},{"bytes":287,"dir":2,"interval":0},{"bytes":564,"dir":1,"interval":180},{"bytes":58,"dir":1,"interval":14},{"bytes":467,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":25},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1446,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s1.ljcdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":53256,"dip":"182.18.17.20","dport":443,"proto":"tcp","c2s_bytes":1583,"s2c_bytes":46188,"c2s_pkts":4,"s2c_pkts":35,"total_pkts":39,"duration":25208,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":573,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":3},{"bytes":271,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":106},{"bytes":58,"dir":1,"interval":42},{"bytes":485,"dir":1,"interval":18},{"bytes":1448,"dir":2,"interval":145},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1155,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"s2.ljcdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53368,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":1260,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53372,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":320,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53362,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2084,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53373,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":513,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53374,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1233,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53370,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1884,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53371,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1876,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53375,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2001,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53377,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1390,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53387,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":1075,"s2c_bytes":4869,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":567,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":5},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":28},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":305,"dir":1,"interval":487},{"bytes":222,"dir":1,"interval":1},{"bytes":676,"dir":2,"interval":99},{"bytes":31,"dir":1,"interval":65}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53378,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":660,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53406,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1219,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53401,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":1195,"s2c_bytes":4557,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":2084,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":300,"dir":1,"interval":2047},{"bytes":347,"dir":1,"interval":1},{"bytes":333,"dir":2,"interval":376},{"bytes":31,"dir":1,"interval":31},{"bytes":31,"dir":2,"interval":16}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53408,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":483,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53379,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2180,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53382,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2628,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53385,"dip":"211.159.232.169","dport":443,"proto":"tcp","c2s_bytes":1406,"s2c_bytes":4242,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":2691,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":394,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":436,"dir":1,"interval":2631},{"bytes":453,"dir":1,"interval":2},{"bytes":590,"dir":2,"interval":91},{"bytes":49,"dir":2,"interval":1},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tongs.ke.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53383,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":1489,"s2c_bytes":4186,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":2697,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":831,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":2633},{"bytes":387,"dir":1,"interval":0},{"bytes":512,"dir":2,"interval":99},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53376,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2701,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53380,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2706,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53381,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2712,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53409,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":795,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53407,"dip":"183.84.18.9","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4019,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":2494,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":433,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":585,"dir":1,"interval":2442},{"bytes":358,"dir":1,"interval":3},{"bytes":401,"dir":2,"interval":83},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53420,"dip":"45.40.218.87","dport":443,"proto":"tcp","c2s_bytes":2093,"s2c_bytes":4083,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":264,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":490,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":10},{"bytes":427,"dir":1,"interval":171},{"bytes":1149,"dir":1,"interval":1},{"bytes":446,"dir":2,"interval":175},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"iossec.ke.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53410,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":643,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53400,"dip":"61.135.185.33","dport":443,"proto":"tcp","c2s_bytes":1315,"s2c_bytes":5218,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":3279,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":4},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":300,"dir":1,"interval":3200},{"bytes":467,"dir":1,"interval":30},{"bytes":994,"dir":2,"interval":1572},{"bytes":31,"dir":1,"interval":45},{"bytes":31,"dir":2,"interval":16}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53386,"dip":"203.208.39.223","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":3002,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":3385,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":958,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":3354},{"bytes":596,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53412,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1148,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53389,"dip":"183.84.18.8","dport":443,"proto":"tcp","c2s_bytes":1124,"s2c_bytes":4344,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":5122,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":455,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":607,"dir":1,"interval":5111},{"bytes":655,"dir":2,"interval":2997},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ab.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53424,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":309,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53415,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2506,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53414,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2507,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53421,"dip":"183.84.18.8","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4004,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":2346,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":585,"dir":1,"interval":2295},{"bytes":358,"dir":1,"interval":1},{"bytes":401,"dir":2,"interval":116},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53416,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2910,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53418,"dip":"183.84.18.9","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4004,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":3004,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":2956},{"bytes":358,"dir":1,"interval":0},{"bytes":401,"dir":2,"interval":567},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53419,"dip":"183.84.18.9","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4004,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":3003,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":2954},{"bytes":358,"dir":1,"interval":0},{"bytes":401,"dir":2,"interval":569},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53426,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":449,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53423,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2438,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53428,"dip":"203.208.39.223","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":2407,"c2s_pkts":2,"s2c_pkts":2,"total_pkts":4,"duration":773,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":959,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":753}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53430,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1019,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53427,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1584,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53411,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4940,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53432,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1419,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53429,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1882,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53431,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1502,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53417,"dip":"183.84.18.9","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":4004,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":5369,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":418,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":5317},{"bytes":358,"dir":1,"interval":0},{"bytes":401,"dir":2,"interval":292},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pushapi.ke.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53443,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":512,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53425,"dip":"183.84.18.8","dport":443,"proto":"tcp","c2s_bytes":1124,"s2c_bytes":4329,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":5516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":440,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":607,"dir":1,"interval":5510},{"bytes":655,"dir":2,"interval":3504},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ab.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53435,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2528,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53433,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2529,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53394,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":2256,"s2c_bytes":91317,"c2s_pkts":3,"s2c_pkts":66,"total_pkts":69,"duration":7337,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":443,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1163,"dir":1,"interval":7016},{"bytes":576,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":5259},{"bytes":227,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":400,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53434,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3357,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53455,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":440,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53447,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1758,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52381,"dip":"106.11.250.218","dport":443,"proto":"tcp","c2s_bytes":944,"s2c_bytes":3842,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":238907,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":25},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":69},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":213,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":46},{"bytes":38,"dir":1,"interval":46},{"bytes":270,"dir":2,"interval":31},{"bytes":31,"dir":1,"interval":238790}],"tls":{"version":"tls1.2","sni":"wgo.mmstat.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53449,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1655,"s2c_bytes":4679,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2153,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1138,"dir":1,"interval":2128},{"bytes":1008,"dir":2,"interval":975},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53444,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3082,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53390,"dip":"211.159.232.169","dport":443,"proto":"tcp","c2s_bytes":1428,"s2c_bytes":4257,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":5398,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":809,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":911,"dir":1,"interval":5342},{"bytes":590,"dir":2,"interval":3217},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tongs.ke.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53448,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1627,"s2c_bytes":4437,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2405,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1110,"dir":1,"interval":2333},{"bytes":766,"dir":2,"interval":1226},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53452,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1953,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53457,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1224,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53445,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":4141,"s2c_bytes":4062,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":3327,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":856,"dir":1,"interval":3318},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":720,"dir":1,"interval":0},{"bytes":437,"dir":2,"interval":165},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53453,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1988,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53451,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1993,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53458,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1904,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53462,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":1049,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"m.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53450,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":2219,"s2c_bytes":5124,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":3631,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1183,"dir":1,"interval":3498},{"bytes":519,"dir":1,"interval":0},{"bytes":1453,"dir":2,"interval":2451},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53465,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":659,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53467,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53466,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":1315,"s2c_bytes":5193,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":1065,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":32},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":53},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":300,"dir":1,"interval":877},{"bytes":467,"dir":1,"interval":0},{"bytes":1000,"dir":2,"interval":303},{"bytes":31,"dir":1,"interval":173}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53454,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1656,"s2c_bytes":4787,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":1927,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1139,"dir":1,"interval":1887},{"bytes":1116,"dir":2,"interval":52},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53464,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1323,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53475,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":875,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53472,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1518,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53469,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1583,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53480,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":721,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53477,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1288,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53476,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1656,"s2c_bytes":4804,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":1792,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1139,"dir":1,"interval":1729},{"bytes":1133,"dir":2,"interval":97},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53463,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":2260,"s2c_bytes":43267,"c2s_pkts":3,"s2c_pkts":33,"total_pkts":36,"duration":1860,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1163,"dir":1,"interval":1692},{"bytes":580,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":200},{"bytes":228,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":544,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53468,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1671,"s2c_bytes":4717,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":1929,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1154,"dir":1,"interval":1891},{"bytes":1046,"dir":2,"interval":56},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52747,"dip":"111.26.158.228","dport":443,"proto":"tcp","c2s_bytes":1200,"s2c_bytes":115233,"c2s_pkts":5,"s2c_pkts":82,"total_pkts":87,"duration":126348,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":29},{"bytes":126,"dir":1,"interval":278},{"bytes":263,"dir":1,"interval":12},{"bytes":1460,"dir":2,"interval":88},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1376,"dir":2,"interval":0},{"bytes":263,"dir":1,"interval":6025},{"bytes":1460,"dir":2,"interval":6000},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":908,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31715},{"bytes":31,"dir":2,"interval":119965}],"tls":{"version":"tls1.2","sni":"vthumb.ykimg.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53388,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":1982,"s2c_bytes":6857,"c2s_pkts":4,"s2c_pkts":13,"total_pkts":17,"duration":18340,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":6},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":29},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":484},{"bytes":263,"dir":1,"interval":3},{"bytes":676,"dir":2,"interval":92},{"bytes":849,"dir":1,"interval":2816},{"bytes":1460,"dir":2,"interval":2799},{"bytes":497,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":15000}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53483,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1645,"s2c_bytes":4437,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":1898,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1128,"dir":1,"interval":1862},{"bytes":766,"dir":2,"interval":79},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53482,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1643,"s2c_bytes":8554,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":2115,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":828,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1126,"dir":1,"interval":2070},{"bytes":1260,"dir":2,"interval":90},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":804,"dir":2,"interval":0},{"bytes":333,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53481,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1643,"s2c_bytes":8523,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":3364,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1126,"dir":1,"interval":3302},{"bytes":1460,"dir":2,"interval":107},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":472,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53485,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":163,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53492,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":569,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53478,"dip":"211.159.232.169","dport":443,"proto":"tcp","c2s_bytes":6336,"s2c_bytes":4109,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":4593,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":809,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":426,"dir":1,"interval":4565},{"bytes":1452,"dir":1,"interval":2},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1037,"dir":1,"interval":0},{"bytes":442,"dir":2,"interval":55},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"tongs.ke.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53496,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2215,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53487,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1688,"s2c_bytes":5706,"c2s_pkts":2,"s2c_pkts":8,"total_pkts":10,"duration":2985,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1171,"dir":1,"interval":2931},{"bytes":1460,"dir":2,"interval":545},{"bytes":575,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53493,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1672,"s2c_bytes":4473,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":2866,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1155,"dir":1,"interval":2802},{"bytes":802,"dir":2,"interval":556},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53491,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1792,"s2c_bytes":58691,"c2s_pkts":2,"s2c_pkts":43,"total_pkts":45,"duration":3111,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1275,"dir":1,"interval":2820},{"bytes":1460,"dir":2,"interval":782},{"bytes":228,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":837,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53494,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1672,"s2c_bytes":36675,"c2s_pkts":2,"s2c_pkts":28,"total_pkts":30,"duration":3117,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1155,"dir":1,"interval":2785},{"bytes":1460,"dir":2,"interval":818},{"bytes":228,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1437,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":744,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53488,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4411,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53486,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":1546,"s2c_bytes":4062,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":5538,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":454,"dir":1,"interval":2940},{"bytes":575,"dir":1,"interval":2594},{"bytes":437,"dir":2,"interval":2791},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53489,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":4129,"s2c_bytes":4061,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":5538,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":880,"dir":1,"interval":2940},{"bytes":1452,"dir":1,"interval":10},{"bytes":596,"dir":1,"interval":0},{"bytes":684,"dir":1,"interval":2582},{"bytes":436,"dir":2,"interval":3098},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53499,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1264,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53497,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2891,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53490,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":6357,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53500,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1672,"s2c_bytes":35868,"c2s_pkts":2,"s2c_pkts":28,"total_pkts":30,"duration":1626,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1155,"dir":1,"interval":1321},{"bytes":1460,"dir":2,"interval":351},{"bytes":1460,"dir":2,"interval":0},{"bytes":216,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":457,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53509,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":587,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53508,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1122,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53502,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2230,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53504,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2269,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53501,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2554,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53512,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1113,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53514,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":872,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":2},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53511,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2108,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53367,"dip":"116.85.3.3","dport":443,"proto":"tcp","c2s_bytes":8980,"s2c_bytes":5428,"c2s_pkts":10,"s2c_pkts":6,"total_pkts":16,"duration":32485,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":536},{"bytes":367,"dir":1,"interval":9},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1200,"dir":1,"interval":969},{"bytes":1200,"dir":1,"interval":11},{"bytes":1183,"dir":1,"interval":-740},{"bytes":192,"dir":2,"interval":1060},{"bytes":31,"dir":1,"interval":31695}],"tls":{"version":"tls1.2","sni":"omgup.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53513,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1540,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52530,"dip":"124.239.162.221","dport":443,"proto":"tcp","c2s_bytes":1754,"s2c_bytes":84542,"c2s_pkts":11,"s2c_pkts":84,"total_pkts":95,"duration":183313,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":11},{"bytes":570,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":1075},{"bytes":255,"dir":2,"interval":12},{"bytes":255,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":58,"dir":1,"interval":23},{"bytes":46,"dir":1,"interval":2},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":214,"dir":1,"interval":0},{"bytes":131,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":33},{"bytes":31,"dir":1,"interval":78},{"bytes":1460,"dir":2,"interval":89},{"bytes":1460,"dir":2,"interval":0},{"bytes":29,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1201,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":25,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":14,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":14},{"bytes":25,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":44,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1199,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":17,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":18,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":26,"dir":2,"interval":0},{"bytes":394,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":291,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":132,"dir":1,"interval":5712},{"bytes":1460,"dir":2,"interval":5729},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":691,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":25},{"bytes":25,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":25,"dir":2,"interval":0},{"bytes":611,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1199,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1350,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":155741}],"tls":{"version":"tls1.2","sni":"ykimg.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53518,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2845,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53521,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1419,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53520,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":604,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53459,"dip":"17.248.161.144","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":20163,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53515,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":5843,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53384,"dip":"124.239.239.234","dport":443,"proto":"tcp","c2s_bytes":936,"s2c_bytes":4463,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":33441,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":836,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":16},{"bytes":126,"dir":1,"interval":1693},{"bytes":262,"dir":1,"interval":5},{"bytes":431,"dir":2,"interval":241},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":31735}],"tls":{"version":"tls1.2","sni":"www.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53519,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3441,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53523,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2020,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53524,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2016,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53530,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1365,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53526,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2009,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53527,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1936,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53531,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":972,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53532,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1242,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53517,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":8694,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53528,"dip":"123.207.209.42","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3625,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.42","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53534,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1869,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53533,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1966,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53537,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":879,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53536,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1179,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53541,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":934,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53539,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1913,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53538,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1996,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53544,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":934,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53548,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":761,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53535,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":1990,"s2c_bytes":4076,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":4579,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":551,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":877,"dir":1,"interval":4533},{"bytes":596,"dir":1,"interval":0},{"bytes":436,"dir":2,"interval":88},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53542,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2936,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53549,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1085,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53546,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2187,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53547,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2189,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53551,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1215,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53552,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1579,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53554,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1707,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53557,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1279,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53558,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1555,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53562,"dip":"123.207.209.41","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1036,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.41","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53446,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":1269,"s2c_bytes":61696,"c2s_pkts":4,"s2c_pkts":44,"total_pkts":48,"duration":35301,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":274,"dir":2,"interval":40},{"bytes":126,"dir":1,"interval":1635},{"bytes":595,"dir":1,"interval":355},{"bytes":1460,"dir":2,"interval":655},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33303}],"tls":{"version":"tls1.2","sni":"as.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53556,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2921,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53561,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2536,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53563,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":3109,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53566,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1722,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53565,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2263,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53568,"dip":"203.208.39.215","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":3001,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":2942,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":596,"dir":2,"interval":45},{"bytes":523,"dir":1,"interval":1617}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53577,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4184,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1327,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":33},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53580,"dip":"175.25.19.43","dport":443,"proto":"tcp","c2s_bytes":1053,"s2c_bytes":3597,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":1354,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":88,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":320,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1325},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":226,"dir":1,"interval":0},{"bytes":96,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":1314},{"bytes":120,"dir":2,"interval":4},{"bytes":38,"dir":1,"interval":19},{"bytes":31,"dir":1,"interval":6}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53581,"dip":"175.25.19.43","dport":443,"proto":"tcp","c2s_bytes":1053,"s2c_bytes":3597,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":1355,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":88,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":320,"dir":2,"interval":0},{"bytes":135,"dir":2,"interval":4},{"bytes":53,"dir":1,"interval":1325},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":226,"dir":1,"interval":0},{"bytes":96,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":1318},{"bytes":120,"dir":2,"interval":4},{"bytes":38,"dir":1,"interval":12},{"bytes":31,"dir":1,"interval":13}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53576,"dip":"175.25.19.43","dport":443,"proto":"tcp","c2s_bytes":1048,"s2c_bytes":3597,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":2012,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":88,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":320,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1990},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":226,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":384},{"bytes":120,"dir":2,"interval":4},{"bytes":31,"dir":1,"interval":15}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53575,"dip":"175.25.19.43","dport":443,"proto":"tcp","c2s_bytes":1423,"s2c_bytes":3600,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":442,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":88,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":320,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":425},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":266,"dir":1,"interval":0},{"bytes":426,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":43},{"bytes":123,"dir":2,"interval":4},{"bytes":31,"dir":1,"interval":12}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53587,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":518,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53614,"dip":"203.208.39.215","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":2406,"c2s_pkts":2,"s2c_pkts":2,"total_pkts":4,"duration":161,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":958,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":130}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53585,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1337,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53600,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":809,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53612,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":2759,"s2c_bytes":265237,"c2s_pkts":5,"s2c_pkts":195,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":543,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":155},{"bytes":702,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1182,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":901,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1204,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1198,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1204,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":406,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1198,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1204,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1408,"dir":2,"interval":0},{"bytes":257,"dir":2,"interval":0},{"bytes":704,"dir":1,"interval":104},{"bytes":1460,"dir":2,"interval":95},{"bytes":1460,"dir":2,"interval":0},{"bytes":1371,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":324,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":914,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":914,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":914,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":922,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":914,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":914,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":913,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":914,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1204,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":881,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":710,"dir":1,"interval":91},{"bytes":1460,"dir":2,"interval":81},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1077,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v6-static.ws.126.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53589,"dip":"52.80.245.54","dport":443,"proto":"tcp","c2s_bytes":1773,"s2c_bytes":3620,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":1521,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":371,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":5},{"bytes":218,"dir":1,"interval":1450},{"bytes":1007,"dir":1,"interval":0},{"bytes":302,"dir":2,"interval":93},{"bytes":31,"dir":1,"interval":69}],"tls":{"version":"tls1.2","sni":"adt.xdrig.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53621,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":705,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53592,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1862,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53620,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1368,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":328},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53607,"dip":"114.113.88.71","dport":443,"proto":"tcp","c2s_bytes":4205,"s2c_bytes":227660,"c2s_pkts":22,"s2c_pkts":178,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":537,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":75},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":335,"dir":1,"interval":0},{"bytes":225,"dir":1,"interval":0},{"bytes":205,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":136,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1116,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":581,"dir":2,"interval":0},{"bytes":218,"dir":1,"interval":43},{"bytes":223,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":44},{"bytes":1460,"dir":2,"interval":0},{"bytes":1107,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":930,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":127,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":822,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":399,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":65},{"bytes":1460,"dir":2,"interval":57},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1288,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":221,"dir":1,"interval":1205},{"bytes":221,"dir":1,"interval":1},{"bytes":221,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1206},{"bytes":1460,"dir":2,"interval":0},{"bytes":1107,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":50,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1096,"dir":2,"interval":0},{"bytes":693,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1110,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":874,"dir":2,"interval":0},{"bytes":187,"dir":1,"interval":334},{"bytes":214,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":332},{"bytes":1460,"dir":2,"interval":0},{"bytes":842,"dir":2,"interval":0},{"bytes":1328,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1324,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":216,"dir":1,"interval":72},{"bytes":215,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":765,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":787,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1089,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":205,"dir":1,"interval":34},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":707,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":216,"dir":1,"interval":27},{"bytes":1460,"dir":2,"interval":28},{"bytes":1460,"dir":2,"interval":0},{"bytes":784,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":968,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":968,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1313,"dir":2,"interval":0},{"bytes":215,"dir":1,"interval":52},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":0},{"bytes":787,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1214,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":968,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v6-nimg.ws.126.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53619,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2137,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53628,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":760,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53626,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1695,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53622,"dip":"114.67.225.151","dport":443,"proto":"tcp","c2s_bytes":2152,"s2c_bytes":3714,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":3217,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":514},{"bytes":126,"dir":1,"interval":1492},{"bytes":219,"dir":1,"interval":33},{"bytes":1259,"dir":1,"interval":9},{"bytes":200,"dir":2,"interval":1863},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":1676}],"tls":{"version":"tls1.2","sni":"me.xdrig.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53655,"dip":"54.222.212.127","dport":443,"proto":"tcp","c2s_bytes":1984,"s2c_bytes":3651,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":418,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":371,"dir":2,"interval":0},{"bytes":51,"dir":2,"interval":9},{"bytes":219,"dir":1,"interval":291},{"bytes":1217,"dir":1,"interval":3},{"bytes":302,"dir":2,"interval":272},{"bytes":31,"dir":1,"interval":119},{"bytes":31,"dir":2,"interval":68}],"tls":{"version":"tls1.2","sni":"adt.xdrig.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53650,"dip":"182.18.17.14","dport":443,"proto":"tcp","c2s_bytes":1524,"s2c_bytes":269187,"c2s_pkts":9,"s2c_pkts":191,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":724,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":3},{"bytes":349,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":752},{"bytes":58,"dir":1,"interval":14},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":236,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":28},{"bytes":31,"dir":1,"interval":6},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1123,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":64},{"bytes":1448,"dir":2,"interval":51},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1199,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":982,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"pg-ad-b1.ws.126.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53653,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":878,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53636,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2024,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53652,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":970,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53648,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1788,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53571,"dip":"101.71.154.226","dport":443,"proto":"tcp","c2s_bytes":1583,"s2c_bytes":3940,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":7200,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":48},{"bytes":126,"dir":1,"interval":2047},{"bytes":700,"dir":1,"interval":16},{"bytes":240,"dir":1,"interval":0},{"bytes":350,"dir":2,"interval":150},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4999}],"tls":{"version":"tls1.2","sni":"bjrec.m.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53616,"dip":"101.71.154.226","dport":443,"proto":"tcp","c2s_bytes":1605,"s2c_bytes":3925,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5398,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":126,"dir":1,"interval":259},{"bytes":718,"dir":1,"interval":10},{"bytes":244,"dir":1,"interval":0},{"bytes":350,"dir":2,"interval":159},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"bjrec.m.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53615,"dip":"101.71.154.226","dport":443,"proto":"tcp","c2s_bytes":1599,"s2c_bytes":3924,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5418,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":34},{"bytes":126,"dir":1,"interval":255},{"bytes":718,"dir":1,"interval":10},{"bytes":238,"dir":1,"interval":0},{"bytes":349,"dir":2,"interval":151},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4994}],"tls":{"version":"tls1.2","sni":"bjrec.m.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53583,"dip":"101.71.154.230","dport":443,"proto":"tcp","c2s_bytes":1829,"s2c_bytes":3891,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":6886,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":59},{"bytes":126,"dir":1,"interval":1734},{"bytes":709,"dir":1,"interval":10},{"bytes":477,"dir":1,"interval":15},{"bytes":295,"dir":2,"interval":172},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":4995}],"tls":{"version":"tls1.2","sni":"p.3g.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53634,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2304,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53665,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1128,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53567,"dip":"216.58.200.234","dport":443,"proto":"tcp","c2s_bytes":1699,"s2c_bytes":3931,"c2s_pkts":8,"s2c_pkts":4,"total_pkts":12,"duration":10183,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":451,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":973},{"bytes":58,"dir":1,"interval":695},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0},{"bytes":303,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"play.googleapis.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53664,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1834,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53670,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":915,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53633,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":2068,"s2c_bytes":3919,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":5326,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":29},{"bytes":126,"dir":1,"interval":287},{"bytes":1425,"dir":1,"interval":9},{"bytes":313,"dir":2,"interval":109},{"bytes":57,"dir":2,"interval":4990}],"tls":{"version":"tls1.2","sni":"nex.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53629,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":1687,"s2c_bytes":4024,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5409,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":28},{"bytes":126,"dir":1,"interval":287},{"bytes":430,"dir":1,"interval":8},{"bytes":614,"dir":1,"interval":9},{"bytes":345,"dir":2,"interval":184},{"bytes":73,"dir":2,"interval":0},{"bytes":57,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"nex.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53630,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":1685,"s2c_bytes":4024,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5411,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":33},{"bytes":126,"dir":1,"interval":287},{"bytes":430,"dir":1,"interval":8},{"bytes":612,"dir":1,"interval":1},{"bytes":345,"dir":2,"interval":181},{"bytes":73,"dir":2,"interval":0},{"bytes":57,"dir":2,"interval":4999}],"tls":{"version":"tls1.2","sni":"nex.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53627,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":1927,"s2c_bytes":3959,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5486,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":31},{"bytes":126,"dir":1,"interval":336},{"bytes":456,"dir":1,"interval":33},{"bytes":828,"dir":1,"interval":0},{"bytes":281,"dir":2,"interval":170},{"bytes":57,"dir":2,"interval":0},{"bytes":57,"dir":2,"interval":4997}],"tls":{"version":"tls1.2","sni":"g1.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53631,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":2113,"s2c_bytes":3919,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":5510,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":339},{"bytes":1448,"dir":1,"interval":133},{"bytes":22,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":193},{"bytes":57,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"nex.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53673,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1066,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53594,"dip":"223.252.199.7","dport":443,"proto":"tcp","c2s_bytes":973,"s2c_bytes":4407,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":8161,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":383,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36},{"bytes":390,"dir":1,"interval":3030},{"bytes":66,"dir":1,"interval":6},{"bytes":790,"dir":2,"interval":368},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5001}],"tls":{"version":"tls1.2","sni":"ar.hz.netease.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53669,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1436,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53632,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":1810,"s2c_bytes":16929,"c2s_pkts":4,"s2c_pkts":16,"total_pkts":20,"duration":5857,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":336},{"bytes":430,"dir":1,"interval":131},{"bytes":737,"dir":1,"interval":4},{"bytes":1448,"dir":2,"interval":543},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":673,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":993,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":34},{"bytes":57,"dir":2,"interval":4964}],"tls":{"version":"tls1.2","sni":"nex.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53635,"dip":"223.252.199.7","dport":443,"proto":"tcp","c2s_bytes":884,"s2c_bytes":4363,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":5766,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":383,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":336,"dir":1,"interval":659},{"bytes":31,"dir":1,"interval":0},{"bytes":746,"dir":2,"interval":168},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"ar.hz.netease.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53674,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1727,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53677,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1277,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53682,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1065,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53681,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1698,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53684,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":731,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53683,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1417,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53685,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":908,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53689,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1297,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53686,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1648,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53693,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":890,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53697,"dip":"203.208.50.98","dport":443,"proto":"tcp","c2s_bytes":1570,"s2c_bytes":4322,"c2s_pkts":10,"s2c_pkts":8,"total_pkts":18,"duration":579,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":395,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":453},{"bytes":596,"dir":2,"interval":37},{"bytes":58,"dir":1,"interval":43},{"bytes":46,"dir":1,"interval":13},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":254,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":27},{"bytes":31,"dir":2,"interval":70},{"bytes":334,"dir":2,"interval":19},{"bytes":31,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":39,"dir":1,"interval":35},{"bytes":24,"dir":1,"interval":2}],"tls":{"version":"tls1.2","sni":"app-measurement.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53702,"dip":"203.208.50.98","dport":443,"proto":"tcp","c2s_bytes":2051,"s2c_bytes":4275,"c2s_pkts":11,"s2c_pkts":7,"total_pkts":18,"duration":643,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1379,"dir":2,"interval":0},{"bytes":464,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":548},{"bytes":58,"dir":1,"interval":11},{"bytes":46,"dir":1,"interval":1},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0},{"bytes":561,"dir":1,"interval":0},{"bytes":596,"dir":2,"interval":38},{"bytes":31,"dir":1,"interval":22},{"bytes":31,"dir":2,"interval":17},{"bytes":287,"dir":2,"interval":15},{"bytes":70,"dir":2,"interval":4},{"bytes":39,"dir":1,"interval":53},{"bytes":24,"dir":1,"interval":3}],"tls":{"version":"tls1.2","sni":"app-measurement.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53698,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1305,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53699,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1682,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53703,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":670,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53700,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1694,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53574,"dip":"112.80.255.191","dport":443,"proto":"tcp","c2s_bytes":1070,"s2c_bytes":4914,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":16412,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":33},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":326,"dir":1,"interval":1344},{"bytes":227,"dir":1,"interval":10},{"bytes":690,"dir":2,"interval":388},{"bytes":31,"dir":2,"interval":15000}],"tls":{"version":"tls1.2","sni":"api.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53599,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":1249,"s2c_bytes":5174,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":15584,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":13},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":54},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":321,"dir":1,"interval":469},{"bytes":411,"dir":1,"interval":1},{"bytes":965,"dir":2,"interval":135},{"bytes":31,"dir":2,"interval":15008}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53704,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1280,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53641,"dip":"35.227.252.169","dport":443,"proto":"tcp","c2s_bytes":232,"s2c_bytes":3247,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":10183,"packets":[{"bytes":232,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1215,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"stats.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":53584,"dip":"106.11.19.93","dport":443,"proto":"tcp","c2s_bytes":1496,"s2c_bytes":4173,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":16748,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1378,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":43},{"bytes":330,"dir":1,"interval":1610},{"bytes":649,"dir":1,"interval":0},{"bytes":1030,"dir":2,"interval":158},{"bytes":31,"dir":2,"interval":15008}],"tls":{"version":"tls1.2","sni":"dispatcher.is.autonavi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53706,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1640,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53602,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":7889,"s2c_bytes":142131,"c2s_pkts":42,"s2c_pkts":158,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":322,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":132},{"bytes":53,"dir":1,"interval":2},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":503,"dir":1,"interval":0},{"bytes":143,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":13},{"bytes":38,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":42},{"bytes":1242,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":415,"dir":2,"interval":24},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1385,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":16},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":152,"dir":2,"interval":0},{"bytes":1072,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":196,"dir":1,"interval":1400},{"bytes":1460,"dir":2,"interval":1418},{"bytes":1196,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":419,"dir":1,"interval":838},{"bytes":1460,"dir":2,"interval":996},{"bytes":146,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":889,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1003,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":441},{"bytes":142,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":212},{"bytes":1460,"dir":2,"interval":0},{"bytes":350,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":32},{"bytes":438,"dir":2,"interval":0},{"bytes":165,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":415,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":143,"dir":1,"interval":102},{"bytes":142,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":80},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":369,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1431,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":417,"dir":1,"interval":1002},{"bytes":1460,"dir":2,"interval":1245},{"bytes":432,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1208,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":862,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":712},{"bytes":1460,"dir":2,"interval":467},{"bytes":1460,"dir":2,"interval":0},{"bytes":725,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":331},{"bytes":1460,"dir":2,"interval":298},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1227,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":303},{"bytes":1460,"dir":2,"interval":300},{"bytes":1460,"dir":2,"interval":0},{"bytes":156,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":417,"dir":1,"interval":459},{"bytes":1460,"dir":2,"interval":650},{"bytes":135,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":8,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":14,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":132,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":464},{"bytes":142,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":268},{"bytes":1460,"dir":2,"interval":0},{"bytes":1052,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":40},{"bytes":554,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1235,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":208},{"bytes":1460,"dir":2,"interval":167},{"bytes":1126,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":48},{"bytes":1460,"dir":2,"interval":56},{"bytes":1460,"dir":2,"interval":0},{"bytes":173,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":316},{"bytes":1460,"dir":2,"interval":340},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":118,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":205},{"bytes":1460,"dir":2,"interval":167},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":421,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":419,"dir":1,"interval":535},{"bytes":1460,"dir":2,"interval":690},{"bytes":127,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":0},{"bytes":1275,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1247,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":141,"dir":1,"interval":385},{"bytes":142,"dir":1,"interval":0},{"bytes":142,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":258},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1394,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1249,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":134},{"bytes":1460,"dir":2,"interval":98},{"bytes":1460,"dir":2,"interval":0},{"bytes":1268,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":147,"dir":1,"interval":3114},{"bytes":434,"dir":2,"interval":3138},{"bytes":424,"dir":1,"interval":111},{"bytes":236,"dir":1,"interval":16},{"bytes":145,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":125},{"bytes":85,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":43},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1255,"dir":2,"interval":0},{"bytes":1204,"dir":2,"interval":0},{"bytes":858,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":59},{"bytes":976,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":191,"dir":1,"interval":4628},{"bytes":1405,"dir":2,"interval":4557},{"bytes":1298,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":142,"dir":1,"interval":287},{"bytes":142,"dir":1,"interval":0},{"bytes":141,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":266},{"bytes":1460,"dir":2,"interval":0},{"bytes":635,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v6-gw.m.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53712,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":619,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53705,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2247,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":3},{"bytes":258,"dir":2,"interval":47}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53710,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2242,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53713,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1374,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53696,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":1071,"s2c_bytes":3792,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":5491,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":378,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":418},{"bytes":397,"dir":1,"interval":13},{"bytes":229,"dir":2,"interval":128},{"bytes":31,"dir":2,"interval":4998},{"bytes":31,"dir":1,"interval":5058}],"tls":{"version":"tls1.2","sni":"g.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53718,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":944,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53717,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1591,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53716,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2136,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53719,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1476,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53569,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":20624,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53722,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":785,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53605,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":17736,"s2c_bytes":6605,"c2s_pkts":15,"s2c_pkts":18,"total_pkts":33,"duration":19608,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":378,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":32},{"bytes":126,"dir":1,"interval":251},{"bytes":1322,"dir":1,"interval":17},{"bytes":234,"dir":2,"interval":89},{"bytes":1310,"dir":1,"interval":3014},{"bytes":234,"dir":2,"interval":3022},{"bytes":1331,"dir":1,"interval":460},{"bytes":234,"dir":2,"interval":471},{"bytes":1312,"dir":1,"interval":1288},{"bytes":234,"dir":2,"interval":1276},{"bytes":1307,"dir":1,"interval":585},{"bytes":234,"dir":2,"interval":584},{"bytes":1307,"dir":1,"interval":875},{"bytes":234,"dir":2,"interval":877},{"bytes":1319,"dir":1,"interval":845},{"bytes":234,"dir":2,"interval":845},{"bytes":1307,"dir":1,"interval":2018},{"bytes":234,"dir":2,"interval":2011},{"bytes":1307,"dir":1,"interval":690},{"bytes":234,"dir":2,"interval":691},{"bytes":1312,"dir":1,"interval":3771},{"bytes":234,"dir":2,"interval":3770},{"bytes":1331,"dir":1,"interval":386},{"bytes":234,"dir":2,"interval":386},{"bytes":1310,"dir":1,"interval":202},{"bytes":234,"dir":2,"interval":203},{"bytes":1318,"dir":1,"interval":135},{"bytes":234,"dir":2,"interval":141},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"e-p4p.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53692,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":3235,"s2c_bytes":6929,"c2s_pkts":6,"s2c_pkts":10,"total_pkts":16,"duration":7897,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":29},{"bytes":126,"dir":1,"interval":741},{"bytes":430,"dir":1,"interval":104},{"bytes":682,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":421},{"bytes":1448,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1448,"dir":1,"interval":2021},{"bytes":32,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":1903},{"bytes":57,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"nex.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53728,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":750,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53724,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1522,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53729,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":806,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53727,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1448,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53708,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":1958,"s2c_bytes":3782,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":6154,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":363,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42},{"bytes":126,"dir":1,"interval":967},{"bytes":1315,"dir":1,"interval":97},{"bytes":234,"dir":2,"interval":236},{"bytes":31,"dir":2,"interval":4999}],"tls":{"version":"tls1.2","sni":"e-p4p.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53709,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":2023,"s2c_bytes":3919,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":6092,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":32},{"bytes":126,"dir":1,"interval":955},{"bytes":1380,"dir":1,"interval":108},{"bytes":313,"dir":2,"interval":233},{"bytes":57,"dir":2,"interval":4998}],"tls":{"version":"tls1.2","sni":"nex.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53725,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2525,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53733,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1605,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53735,"dip":"203.208.50.96","dport":443,"proto":"tcp","c2s_bytes":2050,"s2c_bytes":4275,"c2s_pkts":11,"s2c_pkts":8,"total_pkts":19,"duration":1474,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":395,"dir":2,"interval":0},{"bytes":596,"dir":2,"interval":41},{"bytes":523,"dir":1,"interval":961},{"bytes":58,"dir":1,"interval":222},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":5},{"bytes":560,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":327},{"bytes":287,"dir":2,"interval":21},{"bytes":31,"dir":2,"interval":0},{"bytes":39,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":161},{"bytes":39,"dir":1,"interval":121},{"bytes":24,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"app-measurement.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53741,"dip":"175.25.19.42","dport":443,"proto":"tcp","c2s_bytes":1063,"s2c_bytes":3597,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":835,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":568},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":226,"dir":1,"interval":0},{"bytes":106,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":272},{"bytes":120,"dir":2,"interval":4},{"bytes":38,"dir":1,"interval":206},{"bytes":31,"dir":1,"interval":56}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53746,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":630,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53742,"dip":"114.67.225.151","dport":443,"proto":"tcp","c2s_bytes":2007,"s2c_bytes":3714,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":1051,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":1410,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":445},{"bytes":219,"dir":1,"interval":123},{"bytes":1114,"dir":1,"interval":0},{"bytes":200,"dir":2,"interval":317},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":477}],"tls":{"version":"tls1.2","sni":"me.xdrig.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53745,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1018,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":4},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52609,"dip":"31.13.82.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":2880,"c2s_pkts":1,"s2c_pkts":2,"total_pkts":3,"duration":200400,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":526}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53747,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":715,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53737,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1864,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53754,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":750,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53749,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1445,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53588,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":26300,"s2c_bytes":23581,"c2s_pkts":35,"s2c_pkts":36,"total_pkts":71,"duration":25881,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":30},{"bytes":126,"dir":1,"interval":2723},{"bytes":430,"dir":1,"interval":56},{"bytes":615,"dir":1,"interval":0},{"bytes":361,"dir":2,"interval":584},{"bytes":73,"dir":2,"interval":0},{"bytes":1448,"dir":1,"interval":1346},{"bytes":18,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":1015},{"bytes":1448,"dir":1,"interval":460},{"bytes":8,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":461},{"bytes":1448,"dir":1,"interval":1288},{"bytes":313,"dir":2,"interval":1282},{"bytes":1448,"dir":1,"interval":586},{"bytes":18,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":587},{"bytes":1448,"dir":1,"interval":875},{"bytes":18,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":873},{"bytes":1448,"dir":1,"interval":845},{"bytes":28,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":846},{"bytes":449,"dir":1,"interval":1542},{"bytes":825,"dir":2,"interval":1576},{"bytes":73,"dir":2,"interval":0},{"bytes":1448,"dir":1,"interval":476},{"bytes":18,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":443},{"bytes":1448,"dir":1,"interval":690},{"bytes":18,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":687},{"bytes":430,"dir":1,"interval":1155},{"bytes":725,"dir":1,"interval":7},{"bytes":1448,"dir":2,"interval":1734},{"bytes":657,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1413,"dir":1,"interval":799},{"bytes":313,"dir":2,"interval":229},{"bytes":1448,"dir":1,"interval":1809},{"bytes":313,"dir":2,"interval":1811},{"bytes":1448,"dir":1,"interval":403},{"bytes":8,"dir":1,"interval":65},{"bytes":313,"dir":2,"interval":465},{"bytes":1448,"dir":1,"interval":122},{"bytes":18,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":124},{"bytes":1448,"dir":1,"interval":135},{"bytes":30,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":133},{"bytes":1380,"dir":1,"interval":3242},{"bytes":313,"dir":2,"interval":3243},{"bytes":430,"dir":1,"interval":1499},{"bytes":760,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":1845},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":785,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":834,"dir":2,"interval":0},{"bytes":1448,"dir":1,"interval":726},{"bytes":19,"dir":1,"interval":0},{"bytes":313,"dir":2,"interval":383},{"bytes":57,"dir":2,"interval":4996}],"tls":{"version":"tls1.2","sni":"nex.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53753,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1334,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53695,"dip":"101.71.154.225","dport":443,"proto":"tcp","c2s_bytes":6161,"s2c_bytes":4973,"c2s_pkts":10,"s2c_pkts":13,"total_pkts":23,"duration":12973,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":286,"dir":2,"interval":36},{"bytes":126,"dir":1,"interval":631},{"bytes":456,"dir":1,"interval":11},{"bytes":989,"dir":1,"interval":4},{"bytes":281,"dir":2,"interval":146},{"bytes":57,"dir":2,"interval":0},{"bytes":456,"dir":1,"interval":2216},{"bytes":893,"dir":1,"interval":0},{"bytes":281,"dir":2,"interval":2225},{"bytes":57,"dir":2,"interval":0},{"bytes":456,"dir":1,"interval":2768},{"bytes":881,"dir":1,"interval":0},{"bytes":281,"dir":2,"interval":2771},{"bytes":57,"dir":2,"interval":0},{"bytes":456,"dir":1,"interval":2225},{"bytes":931,"dir":1,"interval":0},{"bytes":281,"dir":2,"interval":2220},{"bytes":57,"dir":2,"interval":0},{"bytes":57,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"g1.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53759,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":969,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53564,"dip":"116.85.3.3","dport":443,"proto":"tcp","c2s_bytes":6655,"s2c_bytes":5428,"c2s_pkts":8,"s2c_pkts":6,"total_pkts":14,"duration":31707,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":864},{"bytes":367,"dir":1,"interval":310},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":1258,"dir":1,"interval":7},{"bytes":192,"dir":2,"interval":703},{"bytes":31,"dir":1,"interval":30486}],"tls":{"version":"tls1.2","sni":"omgup.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53760,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1404,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53758,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1768,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53763,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1013,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":48}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53740,"dip":"101.71.154.226","dport":443,"proto":"tcp","c2s_bytes":1602,"s2c_bytes":3940,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":5833,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":126,"dir":1,"interval":500},{"bytes":718,"dir":1,"interval":204},{"bytes":241,"dir":1,"interval":1},{"bytes":350,"dir":2,"interval":374},{"bytes":49,"dir":2,"interval":1},{"bytes":31,"dir":2,"interval":4996}],"tls":{"version":"tls1.2","sni":"bjrec.m.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53743,"dip":"59.111.181.42","dport":443,"proto":"tcp","c2s_bytes":2419,"s2c_bytes":3919,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":6263,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":369,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":29},{"bytes":126,"dir":1,"interval":1000},{"bytes":430,"dir":1,"interval":123},{"bytes":1346,"dir":1,"interval":0},{"bytes":300,"dir":2,"interval":421},{"bytes":49,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":5000}],"tls":{"version":"tls1.2","sni":"dongjian.hz.netease.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53764,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1259,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53766,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1220,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53765,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1705,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53767,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":609,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50344,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":171,"s2c_bytes":3447,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":60,"packets":[{"bytes":171,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50336,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":2817,"s2c_bytes":14280,"c2s_pkts":3,"s2c_pkts":13,"total_pkts":16,"duration":462,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":7},{"bytes":258,"dir":2,"interval":8},{"bytes":1348,"dir":1,"interval":444},{"bytes":1296,"dir":1,"interval":0},{"bytes":645,"dir":2,"interval":135}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50335,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1765,"s2c_bytes":4038,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":549,"packets":[{"bytes":171,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":481,"dir":1,"interval":429},{"bytes":1113,"dir":1,"interval":0},{"bytes":560,"dir":2,"interval":193},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50337,"dip":"203.119.211.135","dport":443,"proto":"tcp","c2s_bytes":1588,"s2c_bytes":3583,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":742,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":458,"dir":1,"interval":673},{"bytes":957,"dir":1,"interval":0},{"bytes":497,"dir":2,"interval":316},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sync.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53768,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1284,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50348,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":1570,"s2c_bytes":3371,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":701,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":458,"dir":1,"interval":646},{"bytes":937,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":407},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50343,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1234,"s2c_bytes":8218,"c2s_pkts":3,"s2c_pkts":8,"total_pkts":11,"duration":890,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":481,"dir":1,"interval":833},{"bytes":581,"dir":1,"interval":7},{"bytes":1429,"dir":2,"interval":392},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53769,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1156,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50338,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1398,"s2c_bytes":3695,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":972,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":479,"dir":1,"interval":917},{"bytes":747,"dir":1,"interval":6},{"bytes":217,"dir":2,"interval":413},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50342,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1225,"s2c_bytes":3695,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":973,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":479,"dir":1,"interval":917},{"bytes":574,"dir":1,"interval":0},{"bytes":217,"dir":2,"interval":415},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50339,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1210,"s2c_bytes":10723,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":975,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":483,"dir":1,"interval":917},{"bytes":555,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":413},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":87,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50340,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1230,"s2c_bytes":21298,"c2s_pkts":3,"s2c_pkts":17,"total_pkts":20,"duration":994,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":481,"dir":1,"interval":931},{"bytes":577,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":430},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":5},{"bytes":1440,"dir":2,"interval":0},{"bytes":582,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50341,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1216,"s2c_bytes":3695,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":1000,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":10},{"bytes":481,"dir":1,"interval":923},{"bytes":563,"dir":1,"interval":0},{"bytes":217,"dir":2,"interval":432},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53776,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":875,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53774,"dip":"175.25.19.40","dport":443,"proto":"tcp","c2s_bytes":1050,"s2c_bytes":3597,"c2s_pkts":8,"s2c_pkts":6,"total_pkts":14,"duration":1056,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":135,"dir":2,"interval":4},{"bytes":53,"dir":1,"interval":682},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":231,"dir":1,"interval":0},{"bytes":88,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":338},{"bytes":120,"dir":2,"interval":5},{"bytes":38,"dir":1,"interval":158},{"bytes":31,"dir":1,"interval":209}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53775,"dip":"175.25.19.40","dport":443,"proto":"tcp","c2s_bytes":1598,"s2c_bytes":3600,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":1058,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":679},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":271,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":338},{"bytes":123,"dir":2,"interval":70},{"bytes":38,"dir":1,"interval":158},{"bytes":31,"dir":1,"interval":209}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53773,"dip":"175.25.19.40","dport":443,"proto":"tcp","c2s_bytes":1476,"s2c_bytes":3600,"c2s_pkts":8,"s2c_pkts":6,"total_pkts":14,"duration":1059,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":135,"dir":2,"interval":4},{"bytes":53,"dir":1,"interval":838},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":271,"dir":1,"interval":0},{"bytes":474,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":449},{"bytes":123,"dir":2,"interval":4},{"bytes":38,"dir":1,"interval":134},{"bytes":31,"dir":1,"interval":76}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53780,"dip":"175.25.19.40","dport":443,"proto":"tcp","c2s_bytes":1087,"s2c_bytes":3597,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":1000,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":612},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":231,"dir":1,"interval":0},{"bytes":125,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":360},{"bytes":120,"dir":2,"interval":4},{"bytes":38,"dir":1,"interval":166},{"bytes":31,"dir":1,"interval":209}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53779,"dip":"175.25.19.40","dport":443,"proto":"tcp","c2s_bytes":1087,"s2c_bytes":3597,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":1000,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":613},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":231,"dir":1,"interval":0},{"bytes":125,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":359},{"bytes":120,"dir":2,"interval":4},{"bytes":38,"dir":1,"interval":165},{"bytes":31,"dir":1,"interval":209}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50347,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":7603,"s2c_bytes":3372,"c2s_pkts":7,"s2c_pkts":5,"total_pkts":12,"duration":1041,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":459,"dir":1,"interval":812},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1209,"dir":1,"interval":209},{"bytes":286,"dir":2,"interval":747},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50349,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":7607,"s2c_bytes":3372,"c2s_pkts":7,"s2c_pkts":5,"total_pkts":12,"duration":1011,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":459,"dir":1,"interval":777},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1213,"dir":1,"interval":210},{"bytes":286,"dir":2,"interval":738},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53772,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1681,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50356,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":3199,"s2c_bytes":3371,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":1008,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":459,"dir":1,"interval":930},{"bytes":1440,"dir":1,"interval":18},{"bytes":1125,"dir":1,"interval":51},{"bytes":286,"dir":2,"interval":232},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50357,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1350,"s2c_bytes":4114,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":1059,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":11},{"bytes":480,"dir":1,"interval":1000},{"bytes":698,"dir":1,"interval":1},{"bytes":636,"dir":2,"interval":278},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50355,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1330,"s2c_bytes":5357,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":852,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":12},{"bytes":487,"dir":1,"interval":760},{"bytes":671,"dir":1,"interval":76},{"bytes":1429,"dir":2,"interval":290},{"bytes":481,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50362,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":2120,"s2c_bytes":4295,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":430,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":279},{"bytes":1440,"dir":1,"interval":120},{"bytes":7,"dir":1,"interval":0},{"bytes":425,"dir":1,"interval":0},{"bytes":817,"dir":2,"interval":273},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50363,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1704,"s2c_bytes":4551,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":464,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":12},{"bytes":45,"dir":1,"interval":294},{"bytes":467,"dir":1,"interval":86},{"bytes":989,"dir":1,"interval":0},{"bytes":1073,"dir":2,"interval":306},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50351,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":1685,"s2c_bytes":3372,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":1281,"packets":[{"bytes":175,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":457,"dir":1,"interval":1225},{"bytes":1053,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":222},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53781,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":679,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50361,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3339,"s2c_bytes":14280,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":675,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":7},{"bytes":258,"dir":2,"interval":10},{"bytes":45,"dir":1,"interval":538},{"bytes":1358,"dir":1,"interval":114},{"bytes":1440,"dir":1,"interval":0},{"bytes":291,"dir":1,"interval":0},{"bytes":645,"dir":2,"interval":329}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50359,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":3308,"s2c_bytes":3371,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":743,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":623},{"bytes":459,"dir":1,"interval":103},{"bytes":1440,"dir":1,"interval":0},{"bytes":1157,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":206},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50360,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1787,"s2c_bytes":4595,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":781,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":45,"dir":1,"interval":603},{"bytes":470,"dir":1,"interval":114},{"bytes":1069,"dir":1,"interval":0},{"bytes":1117,"dir":2,"interval":250},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50370,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":7666,"s2c_bytes":3373,"c2s_pkts":8,"s2c_pkts":5,"total_pkts":13,"duration":215,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1358,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":164},{"bytes":457,"dir":1,"interval":21},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1197,"dir":1,"interval":13},{"bytes":286,"dir":2,"interval":72},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50369,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1928,"s2c_bytes":4568,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":219,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":15},{"bytes":45,"dir":1,"interval":100},{"bytes":488,"dir":1,"interval":22},{"bytes":1161,"dir":1,"interval":0},{"bytes":1090,"dir":2,"interval":142},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":96}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50368,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1666,"s2c_bytes":4115,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":426,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":10},{"bytes":45,"dir":1,"interval":334},{"bytes":477,"dir":1,"interval":27},{"bytes":941,"dir":1,"interval":0},{"bytes":637,"dir":2,"interval":119},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50372,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":2009,"s2c_bytes":6573,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":294,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":45,"dir":1,"interval":178},{"bytes":476,"dir":1,"interval":51},{"bytes":1285,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":140},{"bytes":1429,"dir":2,"interval":0},{"bytes":237,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53595,"dip":"116.85.2.15","dport":443,"proto":"tcp","c2s_bytes":1852,"s2c_bytes":5573,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31951,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":41},{"bytes":126,"dir":1,"interval":1232},{"bytes":598,"dir":1,"interval":5},{"bytes":580,"dir":1,"interval":0},{"bytes":337,"dir":2,"interval":500},{"bytes":31,"dir":1,"interval":30677}],"tls":{"version":"tls1.2","sni":"thanos.xiaojukeji.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50367,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1699,"s2c_bytes":17138,"c2s_pkts":4,"s2c_pkts":15,"total_pkts":19,"duration":667,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":511},{"bytes":486,"dir":1,"interval":79},{"bytes":965,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":204},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":799,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50366,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":2403,"s2c_bytes":5297,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":695,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":602},{"bytes":1440,"dir":1,"interval":69},{"bytes":715,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":194},{"bytes":390,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50374,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":3276,"s2c_bytes":3371,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":203,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":163},{"bytes":459,"dir":1,"interval":23},{"bytes":1440,"dir":1,"interval":0},{"bytes":1125,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":90},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53786,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":649,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50358,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1658,"s2c_bytes":4813,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":1662,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":45,"dir":1,"interval":1527},{"bytes":489,"dir":1,"interval":69},{"bytes":921,"dir":1,"interval":0},{"bytes":1335,"dir":2,"interval":231},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50371,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1665,"s2c_bytes":3833,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":591,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":45,"dir":1,"interval":450},{"bytes":480,"dir":1,"interval":69},{"bytes":937,"dir":1,"interval":0},{"bytes":355,"dir":2,"interval":208},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50364,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1760,"s2c_bytes":4581,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":943,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":830},{"bytes":483,"dir":1,"interval":35},{"bytes":1029,"dir":1,"interval":3},{"bytes":1103,"dir":2,"interval":131},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53739,"dip":"216.58.200.234","dport":443,"proto":"tcp","c2s_bytes":1701,"s2c_bytes":3931,"c2s_pkts":8,"s2c_pkts":4,"total_pkts":12,"duration":10241,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":451,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":568},{"bytes":58,"dir":1,"interval":208},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":175,"dir":1,"interval":0},{"bytes":304,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"play.googleapis.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50375,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1834,"s2c_bytes":7366,"c2s_pkts":4,"s2c_pkts":8,"total_pkts":12,"duration":600,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":340},{"bytes":1440,"dir":1,"interval":45},{"bytes":146,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":379},{"bytes":1429,"dir":2,"interval":0},{"bytes":1030,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50377,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":1690,"s2c_bytes":3371,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":562,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":546},{"bytes":1438,"dir":1,"interval":6},{"bytes":286,"dir":2,"interval":41},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50376,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":2459,"s2c_bytes":14279,"c2s_pkts":4,"s2c_pkts":13,"total_pkts":17,"duration":645,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":615},{"bytes":1347,"dir":1,"interval":7},{"bytes":862,"dir":1,"interval":6},{"bytes":646,"dir":2,"interval":44}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50378,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":1810,"s2c_bytes":3901,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":664,"packets":[{"bytes":203,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":535},{"bytes":485,"dir":1,"interval":10},{"bytes":1077,"dir":1,"interval":0},{"bytes":423,"dir":2,"interval":146},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53791,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":691,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50385,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":3366,"s2c_bytes":3373,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":130,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1358,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":10},{"bytes":45,"dir":1,"interval":104},{"bytes":461,"dir":1,"interval":3},{"bytes":1440,"dir":1,"interval":0},{"bytes":1213,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":45},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50386,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":2386,"s2c_bytes":3371,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":179,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":45,"dir":1,"interval":123},{"bytes":457,"dir":1,"interval":29},{"bytes":1440,"dir":1,"interval":0},{"bytes":237,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":67},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53790,"dip":"122.14.43.41","dport":443,"proto":"tcp","c2s_bytes":1314,"s2c_bytes":85560,"c2s_pkts":9,"s2c_pkts":64,"total_pkts":73,"duration":783,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":245,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":700},{"bytes":53,"dir":1,"interval":4},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":415,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":629,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":56},{"bytes":1460,"dir":2,"interval":48},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1079,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":19}],"tls":{"version":"tls1.2","sni":"cache.amap.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53787,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1151,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50387,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":2736,"s2c_bytes":14279,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":117,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":4},{"bytes":258,"dir":2,"interval":6},{"bytes":45,"dir":1,"interval":98},{"bytes":1440,"dir":1,"interval":3},{"bytes":14,"dir":1,"interval":0},{"bytes":1032,"dir":1,"interval":0},{"bytes":645,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53789,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":979,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50390,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3213,"s2c_bytes":14279,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":142,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":6},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":120},{"bytes":1424,"dir":1,"interval":3},{"bytes":1440,"dir":1,"interval":0},{"bytes":99,"dir":1,"interval":0},{"bytes":646,"dir":2,"interval":59}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53591,"dip":"163.177.151.220","dport":443,"proto":"tcp","c2s_bytes":2633,"s2c_bytes":6474,"c2s_pkts":7,"s2c_pkts":13,"total_pkts":20,"duration":33687,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":70},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":95},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":321,"dir":1,"interval":468},{"bytes":331,"dir":1,"interval":3},{"bytes":320,"dir":2,"interval":274},{"bytes":321,"dir":1,"interval":13363},{"bytes":411,"dir":1,"interval":0},{"bytes":965,"dir":2,"interval":13193},{"bytes":321,"dir":1,"interval":4771},{"bytes":411,"dir":1,"interval":2},{"bytes":965,"dir":2,"interval":4772},{"bytes":31,"dir":2,"interval":15001}],"tls":{"version":"tls1.2","sni":"loc.map.baidu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50393,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3041,"s2c_bytes":14279,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":149,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":114},{"bytes":1440,"dir":1,"interval":18},{"bytes":18,"dir":1,"interval":0},{"bytes":1333,"dir":1,"interval":0},{"bytes":646,"dir":2,"interval":67}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53794,"dip":"203.119.216.63","dport":443,"proto":"tcp","c2s_bytes":2006,"s2c_bytes":3900,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":729,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":324,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":520,"dir":1,"interval":604},{"bytes":969,"dir":1,"interval":0},{"bytes":407,"dir":2,"interval":147},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"m5.amap.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53795,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":659,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50396,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":4035,"s2c_bytes":14280,"c2s_pkts":6,"s2c_pkts":13,"total_pkts":19,"duration":170,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":115},{"bytes":1440,"dir":1,"interval":36},{"bytes":8,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":897,"dir":1,"interval":0},{"bytes":646,"dir":2,"interval":82}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53770,"dip":"203.119.169.130","dport":443,"proto":"tcp","c2s_bytes":3428,"s2c_bytes":7771,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":4834,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":140,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":418,"dir":1,"interval":901},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":414,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":3928}],"tls":{"version":"tls1.2","sni":"acs.m.taobao.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53793,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1273,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50397,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3606,"s2c_bytes":14279,"c2s_pkts":6,"s2c_pkts":13,"total_pkts":19,"duration":233,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":8},{"bytes":258,"dir":2,"interval":13},{"bytes":45,"dir":1,"interval":199},{"bytes":1440,"dir":1,"interval":4},{"bytes":22,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":454,"dir":1,"interval":0},{"bytes":646,"dir":2,"interval":82}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53796,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1014,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50404,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":4278,"s2c_bytes":14279,"c2s_pkts":6,"s2c_pkts":13,"total_pkts":19,"duration":211,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":6},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":186},{"bytes":1440,"dir":1,"interval":6},{"bytes":14,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1134,"dir":1,"interval":0},{"bytes":646,"dir":2,"interval":119}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53798,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":678,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53797,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":952,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50409,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3523,"s2c_bytes":14279,"c2s_pkts":6,"s2c_pkts":13,"total_pkts":19,"duration":110,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":4},{"bytes":258,"dir":2,"interval":6},{"bytes":45,"dir":1,"interval":88},{"bytes":1440,"dir":1,"interval":3},{"bytes":22,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":371,"dir":1,"interval":1},{"bytes":646,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50410,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":1806,"s2c_bytes":3371,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":134,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1356,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":120},{"bytes":1440,"dir":1,"interval":5},{"bytes":114,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":47},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53806,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":824,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53802,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":985,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53801,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1252,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53809,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":680,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53810,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1199,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50418,"dip":"203.119.211.252","dport":443,"proto":"tcp","c2s_bytes":2572,"s2c_bytes":14348,"c2s_pkts":4,"s2c_pkts":13,"total_pkts":17,"duration":302,"packets":[{"bytes":178,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":6},{"bytes":258,"dir":2,"interval":8},{"bytes":485,"dir":1,"interval":253},{"bytes":1440,"dir":1,"interval":0},{"bytes":469,"dir":1,"interval":0},{"bytes":713,"dir":2,"interval":136}],"tls":{"version":"tls1.2","sni":"collapsar.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53808,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1486,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53814,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":3686,"s2c_bytes":236897,"c2s_pkts":31,"s2c_pkts":169,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":240},{"bytes":58,"dir":1,"interval":23},{"bytes":46,"dir":1,"interval":5},{"bytes":43,"dir":1,"interval":1},{"bytes":35,"dir":1,"interval":0},{"bytes":522,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":38},{"bytes":655,"dir":2,"interval":3},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":27},{"bytes":141,"dir":1,"interval":1503},{"bytes":79,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":80,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":80,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":80,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":80,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":80,"dir":1,"interval":0},{"bytes":80,"dir":1,"interval":0},{"bytes":81,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1538},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1388,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":72,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"duang.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53819,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1204,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":44}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53820,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":770,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53827,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":606,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53829,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":883,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53828,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1118,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53813,"dip":"122.14.43.60","dport":443,"proto":"tcp","c2s_bytes":3089,"s2c_bytes":230407,"c2s_pkts":21,"s2c_pkts":179,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":3},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":254},{"bytes":58,"dir":1,"interval":25},{"bytes":46,"dir":1,"interval":3},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":539,"dir":1,"interval":0},{"bytes":186,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":67,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":66,"dir":1,"interval":8},{"bytes":75,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":68,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1054,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":980,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":556,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":945,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":95,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":15},{"bytes":1460,"dir":2,"interval":54},{"bytes":1070,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":359,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":66},{"bytes":961,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":373,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1419,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1292,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":38},{"bytes":25,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":341,"dir":2,"interval":0},{"bytes":35,"dir":1,"interval":269},{"bytes":1460,"dir":2,"interval":75},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":328,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":37},{"bytes":25,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":328,"dir":2,"interval":0},{"bytes":393,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":175,"dir":1,"interval":3447},{"bytes":86,"dir":1,"interval":0},{"bytes":80,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0},{"bytes":94,"dir":1,"interval":0},{"bytes":299,"dir":2,"interval":3348},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"g.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53826,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2228,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53832,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1456,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53834,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1541,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53835,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":459,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53831,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1857,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53838,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":595,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53837,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1399,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53836,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1474,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53839,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":651,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53840,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":731,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53843,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":714,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53841,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1329,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53842,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1420,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53844,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":605,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53816,"dip":"111.62.242.33","dport":443,"proto":"tcp","c2s_bytes":1209,"s2c_bytes":8049,"c2s_pkts":6,"s2c_pkts":10,"total_pkts":16,"duration":9343,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1197,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":130},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":509,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":51},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":609,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"res.wx.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53817,"dip":"106.11.251.20","dport":443,"proto":"tcp","c2s_bytes":1488,"s2c_bytes":4222,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":8910,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":25},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":411},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":495,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":64},{"bytes":343,"dir":2,"interval":25},{"bytes":293,"dir":1,"interval":68},{"bytes":307,"dir":2,"interval":45}],"tls":{"version":"tls1.2","sni":"log.mmstat.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53825,"dip":"106.11.94.57","dport":443,"proto":"tcp","c2s_bytes":2512,"s2c_bytes":4710,"c2s_pkts":13,"s2c_pkts":14,"total_pkts":27,"duration":7473,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":998},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":627,"dir":1,"interval":0},{"bytes":133,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":456},{"bytes":270,"dir":2,"interval":27},{"bytes":135,"dir":2,"interval":0},{"bytes":257,"dir":1,"interval":81},{"bytes":103,"dir":2,"interval":54},{"bytes":159,"dir":1,"interval":2350},{"bytes":126,"dir":2,"interval":2350},{"bytes":159,"dir":1,"interval":790},{"bytes":126,"dir":2,"interval":791},{"bytes":159,"dir":1,"interval":903},{"bytes":126,"dir":2,"interval":903},{"bytes":159,"dir":1,"interval":777},{"bytes":126,"dir":2,"interval":777},{"bytes":159,"dir":1,"interval":1126},{"bytes":126,"dir":2,"interval":1129}],"tls":{"version":"tls1.2","sni":"wgo.mmstat.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53807,"dip":"203.119.211.252","dport":443,"proto":"tcp","c2s_bytes":1214,"s2c_bytes":14098,"c2s_pkts":6,"s2c_pkts":15,"total_pkts":21,"duration":10622,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":487,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":6},{"bytes":258,"dir":2,"interval":11},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":724},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":514,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":427},{"bytes":347,"dir":2,"interval":15}],"tls":{"version":"tls1.2","sni":"surl.amap.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53815,"dip":"122.14.43.184","dport":443,"proto":"tcp","c2s_bytes":1352,"s2c_bytes":9150,"c2s_pkts":7,"s2c_pkts":10,"total_pkts":17,"duration":9361,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":109,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":124},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":526,"dir":1,"interval":0},{"bytes":78,"dir":2,"interval":59},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1383,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":7}],"tls":{"version":"tls1.2","sni":"as.alipayobjects.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53811,"dip":"122.14.43.170","dport":443,"proto":"tcp","c2s_bytes":1386,"s2c_bytes":119971,"c2s_pkts":8,"s2c_pkts":91,"total_pkts":99,"duration":9814,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":259,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":92},{"bytes":53,"dir":1,"interval":9},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":518,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":53},{"bytes":38,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":215},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":211,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":798,"dir":2,"interval":0},{"bytes":792,"dir":2,"interval":15},{"bytes":42,"dir":1,"interval":280},{"bytes":1460,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1114,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":364,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"haibao.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53818,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1816,"s2c_bytes":5970,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":8622,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":4},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":229},{"bytes":58,"dir":1,"interval":35},{"bytes":46,"dir":1,"interval":1},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":563,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":55},{"bytes":1283,"dir":2,"interval":2},{"bytes":585,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":7}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53830,"dip":"122.14.43.45","dport":443,"proto":"tcp","c2s_bytes":1412,"s2c_bytes":5601,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":6410,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":829,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":104},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":64},{"bytes":586,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":67},{"bytes":5,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"h5.m.taobao.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53845,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":804,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50345,"dip":"203.119.211.138","dport":443,"proto":"tcp","c2s_bytes":1487,"s2c_bytes":3442,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":15698,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":1315,"dir":1,"interval":669},{"bytes":353,"dir":2,"interval":397},{"bytes":31,"dir":2,"interval":15001}],"tls":{"version":"tls1.2","sni":"sns.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50428,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":1798,"s2c_bytes":3372,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":253,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":193},{"bytes":461,"dir":1,"interval":2},{"bytes":1085,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":118},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50429,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":1792,"s2c_bytes":3372,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":256,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":45,"dir":1,"interval":187},{"bytes":459,"dir":1,"interval":2},{"bytes":1081,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":107},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50426,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3146,"s2c_bytes":14279,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":341,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":8},{"bytes":258,"dir":2,"interval":13},{"bytes":45,"dir":1,"interval":307},{"bytes":1406,"dir":1,"interval":4},{"bytes":1440,"dir":1,"interval":0},{"bytes":50,"dir":1,"interval":0},{"bytes":645,"dir":2,"interval":116}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50430,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":2431,"s2c_bytes":14279,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":238,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":7},{"bytes":258,"dir":2,"interval":13},{"bytes":45,"dir":1,"interval":204},{"bytes":1440,"dir":1,"interval":5},{"bytes":17,"dir":1,"interval":0},{"bytes":724,"dir":1,"interval":0},{"bytes":645,"dir":2,"interval":99}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53846,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1342,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53847,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":725,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50346,"dip":"203.119.211.138","dport":443,"proto":"tcp","c2s_bytes":4513,"s2c_bytes":6593,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":17113,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":1360,"dir":1,"interval":812},{"bytes":1429,"dir":2,"interval":527},{"bytes":639,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":1235},{"bytes":106,"dir":1,"interval":0},{"bytes":1035,"dir":2,"interval":1258},{"bytes":1435,"dir":1,"interval":53},{"bytes":401,"dir":2,"interval":30},{"bytes":31,"dir":2,"interval":15001}],"tls":{"version":"tls1.2","sni":"sns.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50373,"dip":"203.119.214.58","dport":443,"proto":"tcp","c2s_bytes":1666,"s2c_bytes":4101,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":15238,"packets":[{"bytes":172,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":1440,"dir":1,"interval":211},{"bytes":54,"dir":1,"interval":0},{"bytes":1012,"dir":2,"interval":121},{"bytes":31,"dir":2,"interval":15000}],"tls":{"version":"tls1.2","sni":"oss.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50431,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3334,"s2c_bytes":14277,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":409,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":376},{"bytes":1428,"dir":1,"interval":16},{"bytes":1440,"dir":1,"interval":0},{"bytes":216,"dir":1,"interval":0},{"bytes":644,"dir":2,"interval":330}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53848,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1457,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53851,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":856,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50433,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":2388,"s2c_bytes":3372,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":174,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":135},{"bytes":459,"dir":1,"interval":23},{"bytes":1440,"dir":1,"interval":0},{"bytes":237,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":52},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50432,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":3368,"s2c_bytes":3372,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":189,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":45,"dir":1,"interval":125},{"bytes":463,"dir":1,"interval":36},{"bytes":1440,"dir":1,"interval":0},{"bytes":1213,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":76},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50436,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3400,"s2c_bytes":14279,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":118,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":6},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":95},{"bytes":1432,"dir":1,"interval":3},{"bytes":1440,"dir":1,"interval":0},{"bytes":278,"dir":1,"interval":0},{"bytes":645,"dir":2,"interval":48}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53849,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1321,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53855,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":818,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53856,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1041,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50438,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":7728,"s2c_bytes":3372,"c2s_pkts":8,"s2c_pkts":5,"total_pkts":13,"duration":179,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":151},{"bytes":463,"dir":1,"interval":3},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":6},{"bytes":1253,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":47},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50439,"dip":"203.119.218.155","dport":443,"proto":"tcp","c2s_bytes":3330,"s2c_bytes":3372,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":167,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1357,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":45,"dir":1,"interval":141},{"bytes":461,"dir":1,"interval":8},{"bytes":1440,"dir":1,"interval":0},{"bytes":1177,"dir":1,"interval":0},{"bytes":286,"dir":2,"interval":63},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"awaken.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53857,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1147,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53858,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":683,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53800,"dip":"203.119.169.237","dport":443,"proto":"tcp","c2s_bytes":2745,"s2c_bytes":13722,"c2s_pkts":5,"s2c_pkts":12,"total_pkts":17,"duration":14975,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":251,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":73,"dir":2,"interval":0},{"bytes":416,"dir":1,"interval":164},{"bytes":1440,"dir":1,"interval":0},{"bytes":341,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":14806}],"tls":{"version":"tls1.2","sni":"ynuf.aliapp.org","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53859,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":664,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50437,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3525,"s2c_bytes":14279,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":989,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":5},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":970},{"bytes":1436,"dir":1,"interval":3},{"bytes":1440,"dir":1,"interval":0},{"bytes":399,"dir":1,"interval":0},{"bytes":645,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50440,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":4301,"s2c_bytes":14280,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":204,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":8},{"bytes":258,"dir":2,"interval":12},{"bytes":45,"dir":1,"interval":165},{"bytes":1436,"dir":1,"interval":8},{"bytes":1440,"dir":1,"interval":0},{"bytes":1175,"dir":1,"interval":2},{"bytes":646,"dir":2,"interval":72}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53866,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":700,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53771,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":20716,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53864,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1304,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53868,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":998,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53869,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1328,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53870,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":969,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53871,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":577,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53873,"dip":"116.85.3.33","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1011,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.33","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53872,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1082,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53761,"dip":"17.248.161.50","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3338,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":19503,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1306,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50441,"dip":"203.119.211.251","dport":443,"proto":"tcp","c2s_bytes":3378,"s2c_bytes":14279,"c2s_pkts":6,"s2c_pkts":13,"total_pkts":19,"duration":376,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":4},{"bytes":258,"dir":2,"interval":6},{"bytes":45,"dir":1,"interval":346},{"bytes":1440,"dir":1,"interval":13},{"bytes":92,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":156,"dir":1,"interval":0},{"bytes":645,"dir":2,"interval":98}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53876,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1100,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53874,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1234,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53877,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":578,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53879,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":835,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53878,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1132,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53880,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2626,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53883,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":112,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53882,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2069,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53881,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2464,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53889,"dip":"175.25.19.39","dport":443,"proto":"tcp","c2s_bytes":1097,"s2c_bytes":3597,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":220,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":408,"dir":2,"interval":0},{"bytes":66,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":203},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":231,"dir":1,"interval":0},{"bytes":135,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":49},{"bytes":120,"dir":2,"interval":3},{"bytes":31,"dir":1,"interval":13}],"tls":{"version":"tls1.2","sni":"www.qchannel01.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53885,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":124,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53783,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":2283,"s2c_bytes":8842,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":30382,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":492,"dir":1,"interval":376},{"bytes":1274,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30066}],"tls":{"version":"tls1.2","sni":"plbslog.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53886,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1637,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53887,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1653,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53784,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":1716,"s2c_bytes":8841,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":30405,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":1199,"dir":1,"interval":387},{"bytes":31,"dir":2,"interval":30121}],"tls":{"version":"tls1.2","sni":"log.umsns.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53888,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1659,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53896,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":8811,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":1186,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"plbslog.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53897,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1877,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53898,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1884,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53893,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1987,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53805,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1677,"s2c_bytes":5157,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":30599,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":576,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":256},{"bytes":58,"dir":1,"interval":337},{"bytes":579,"dir":1,"interval":0},{"bytes":1127,"dir":2,"interval":350},{"bytes":24,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53895,"dip":"123.207.209.65","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3511,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53900,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2147,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":53919,"dip":"116.85.3.34","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1164,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.34","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53920,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1170,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53934,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":606,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53921,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1783,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53936,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1140,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53938,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":639,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53937,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":943,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53940,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":754,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53939,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1141,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53942,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":799,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":42}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53929,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1561,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53925,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5796,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3008,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":850,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53943,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1130,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53944,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1564,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53945,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1018,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53958,"dip":"203.208.39.207","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":2406,"c2s_pkts":2,"s2c_pkts":2,"total_pkts":4,"duration":136,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":958,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":107}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53953,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":751,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":50}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53952,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1056,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53951,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1309,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53949,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1508,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53961,"dip":"123.207.209.57","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":667,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"123.207.209.57","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53962,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":973,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53964,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1256,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53963,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1383,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53965,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1053,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53968,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":917,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53966,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1379,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53967,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1353,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":36}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53970,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1237,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53971,"dip":"116.85.3.15","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1309,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"116.85.3.15","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53688,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1764,"s2c_bytes":5369,"c2s_pkts":9,"s2c_pkts":14,"total_pkts":23,"duration":64907,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":537,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":318},{"bytes":53,"dir":1,"interval":207},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":1},{"bytes":531,"dir":1,"interval":0},{"bytes":176,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":264},{"bytes":469,"dir":2,"interval":106},{"bytes":38,"dir":2,"interval":0},{"bytes":443,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":116},{"bytes":231,"dir":1,"interval":4223},{"bytes":444,"dir":2,"interval":4268},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":60000},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v6-gentie.ws.126.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53969,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3590,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2240,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":412,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53854,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":1698,"s2c_bytes":4787,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":30511,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":544,"dir":1,"interval":455},{"bytes":637,"dir":1,"interval":33},{"bytes":1309,"dir":2,"interval":78},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53973,"dip":"123.207.209.64","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5236,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1089,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"api.map.diditaxi.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53852,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":4053,"s2c_bytes":44123,"c2s_pkts":7,"s2c_pkts":35,"total_pkts":42,"duration":31447,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":542,"dir":1,"interval":169},{"bytes":662,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":98},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":6},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1416,"dir":2,"interval":0},{"bytes":538,"dir":1,"interval":168},{"bytes":603,"dir":1,"interval":0},{"bytes":222,"dir":2,"interval":155},{"bytes":533,"dir":1,"interval":1049},{"bytes":658,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":1053},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":6},{"bytes":248,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":29993}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53850,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":5393,"s2c_bytes":168364,"c2s_pkts":9,"s2c_pkts":123,"total_pkts":132,"duration":31635,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":324,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":535,"dir":1,"interval":150},{"bytes":665,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":106},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":9},{"bytes":1440,"dir":2,"interval":2},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":134,"dir":2,"interval":0},{"bytes":536,"dir":1,"interval":354},{"bytes":773,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":351},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":11},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":9},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":735,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":705,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1108,"dir":2,"interval":0},{"bytes":536,"dir":1,"interval":497},{"bytes":638,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":450},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":0},{"bytes":542,"dir":1,"interval":563},{"bytes":651,"dir":1,"interval":0},{"bytes":1120,"dir":2,"interval":562},{"bytes":31,"dir":2,"interval":30000}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53853,"dip":"203.119.214.91","dport":443,"proto":"tcp","c2s_bytes":5552,"s2c_bytes":153583,"c2s_pkts":9,"s2c_pkts":111,"total_pkts":120,"duration":31468,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":542,"dir":1,"interval":169},{"bytes":652,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":99},{"bytes":463,"dir":2,"interval":0},{"bytes":539,"dir":1,"interval":159},{"bytes":682,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":160},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":6},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1423,"dir":2,"interval":0},{"bytes":535,"dir":1,"interval":496},{"bytes":806,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":484},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1085,"dir":2,"interval":0},{"bytes":536,"dir":1,"interval":562},{"bytes":743,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":572},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":7},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":5},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":3},{"bytes":628,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":29985}],"tls":{"version":"tls1.2","sni":"mps.amap.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53972,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5200,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1344,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53941,"dip":"116.85.3.3","dport":443,"proto":"tcp","c2s_bytes":5795,"s2c_bytes":5428,"c2s_pkts":7,"s2c_pkts":6,"total_pkts":13,"duration":10488,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":850,"dir":2,"interval":1},{"bytes":290,"dir":2,"interval":38},{"bytes":126,"dir":1,"interval":736},{"bytes":367,"dir":1,"interval":15},{"bytes":1452,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":2},{"bytes":1452,"dir":1,"interval":0},{"bytes":429,"dir":1,"interval":8},{"bytes":192,"dir":2,"interval":131}],"tls":{"version":"tls1.2","sni":"omgup.xiaojukeji.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53975,"dip":"116.85.3.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"116.85.3.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53974,"dip":"123.207.209.56","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":716,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"123.207.209.56","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53603,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":2594,"s2c_bytes":17965,"c2s_pkts":12,"s2c_pkts":28,"total_pkts":40,"duration":78136,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":322,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":109},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":470,"dir":1,"interval":0},{"bytes":252,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":17},{"bytes":38,"dir":1,"interval":2},{"bytes":748,"dir":2,"interval":64},{"bytes":38,"dir":2,"interval":0},{"bytes":1158,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":117,"dir":1,"interval":215},{"bytes":310,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":216},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":649,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":294},{"bytes":38,"dir":2,"interval":0},{"bytes":311,"dir":1,"interval":12807},{"bytes":271,"dir":2,"interval":12498},{"bytes":38,"dir":2,"interval":0},{"bytes":308,"dir":1,"interval":4945},{"bytes":271,"dir":2,"interval":4941},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":60001},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"v6-c.m.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53865,"dip":"203.119.169.237","dport":443,"proto":"tcp","c2s_bytes":5545,"s2c_bytes":16508,"c2s_pkts":9,"s2c_pkts":14,"total_pkts":23,"duration":31127,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":236,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":359,"dir":1,"interval":188},{"bytes":1440,"dir":1,"interval":0},{"bytes":341,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":105},{"bytes":91,"dir":2,"interval":0},{"bytes":416,"dir":1,"interval":477},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":393,"dir":1,"interval":0},{"bytes":1354,"dir":2,"interval":470},{"bytes":31,"dir":1,"interval":30453}],"tls":{"version":"tls1.2","sni":"ynuf.aliapp.org","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53647,"dip":"124.167.235.25","dport":443,"proto":"tcp","c2s_bytes":1207,"s2c_bytes":60532,"c2s_pkts":9,"s2c_pkts":51,"total_pkts":60,"duration":76903,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":537,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":21},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":396},{"bytes":53,"dir":1,"interval":13},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":230,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":5},{"bytes":38,"dir":2,"interval":102},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1096,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":930,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":655,"dir":2,"interval":0},{"bytes":900,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":120,"dir":1,"interval":16458},{"bytes":1460,"dir":2,"interval":16431},{"bytes":1460,"dir":2,"interval":0},{"bytes":1097,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":930,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":930,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":18},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":59980},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":60028}],"tls":{"version":"tls1.2","sni":"yt-adp.ws.126.net","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50481,"dip":"121.40.10.71","dport":443,"proto":"tcp","c2s_bytes":1631,"s2c_bytes":3811,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":1559,"packets":[{"bytes":151,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":455,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":25},{"bytes":542,"dir":1,"interval":1458},{"bytes":938,"dir":1,"interval":0},{"bytes":218,"dir":2,"interval":126}],"tls":{"version":"tls1.2","sni":"","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53899,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":21540,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53778,"dip":"69.171.234.18","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":63180,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53901,"dip":"121.40.10.71","dport":443,"proto":"tcp","c2s_bytes":1748,"s2c_bytes":3847,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":33094,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":470,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":25},{"bytes":447,"dir":1,"interval":2756},{"bytes":753,"dir":1,"interval":0},{"bytes":223,"dir":2,"interval":153},{"bytes":31,"dir":1,"interval":30334}],"tls":{"version":"tls1.2","sni":"ccdace.hupu.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53926,"dip":"203.119.207.252","dport":443,"proto":"tcp","c2s_bytes":2310,"s2c_bytes":8842,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":31510,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":438,"dir":1,"interval":1502},{"bytes":1355,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30046}],"tls":{"version":"tls1.2","sni":"ulogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53959,"dip":"17.248.161.50","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3338,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":19769,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1306,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53955,"dip":"203.119.207.252","dport":443,"proto":"tcp","c2s_bytes":2094,"s2c_bytes":8843,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":30087,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":438,"dir":1,"interval":80},{"bytes":1139,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30036}],"tls":{"version":"tls1.2","sni":"plbslog.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53956,"dip":"203.119.215.106","dport":443,"proto":"tcp","c2s_bytes":1370,"s2c_bytes":8842,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":30374,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":1165,"dir":1,"interval":366},{"bytes":31,"dir":2,"interval":30040}],"tls":{"version":"tls1.2","sni":"log.umsns.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":53976,"dip":"123.125.106.226","dport":443,"proto":"tcp","c2s_bytes":1477,"s2c_bytes":6213,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":30772,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1178,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":4},{"bytes":960,"dir":1,"interval":674},{"bytes":373,"dir":2,"interval":96}],"tls":{"version":"tls1.2","sni":"api.weibo.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50546,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":739,"s2c_bytes":283715,"c2s_pkts":3,"s2c_pkts":197,"total_pkts":200,"duration":0,"packets":[{"bytes":184,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":249,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":3},{"bytes":45,"dir":1,"interval":136},{"bytes":510,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":42},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":112,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mapdownload.autonavi.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53978,"dip":"203.119.214.125","dport":443,"proto":"tcp","c2s_bytes":2315,"s2c_bytes":8842,"c2s_pkts":3,"s2c_pkts":10,"total_pkts":13,"duration":30121,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":73,"dir":2,"interval":0},{"bytes":443,"dir":1,"interval":112},{"bytes":1355,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30049}],"tls":{"version":"tls1.2","sni":"ulogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50547,"dip":"106.11.14.3","dport":443,"proto":"tcp","c2s_bytes":3711,"s2c_bytes":14279,"c2s_pkts":5,"s2c_pkts":14,"total_pkts":19,"duration":4641,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":256,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":0},{"bytes":1280,"dir":2,"interval":8},{"bytes":319,"dir":2,"interval":38},{"bytes":258,"dir":2,"interval":53},{"bytes":1340,"dir":1,"interval":4542},{"bytes":218,"dir":1,"interval":0},{"bytes":1340,"dir":1,"interval":0},{"bytes":640,"dir":1,"interval":0},{"bytes":646,"dir":2,"interval":4133}],"tls":{"version":"tls1.2","sni":"page.amap.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":53980,"dip":"203.119.207.252","dport":443,"proto":"tcp","c2s_bytes":2092,"s2c_bytes":9149,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":30712,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1327,"dir":2,"interval":0},{"bytes":163,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":7},{"bytes":438,"dir":1,"interval":132},{"bytes":1106,"dir":1,"interval":0},{"bytes":394,"dir":2,"interval":90},{"bytes":31,"dir":1,"interval":30572},{"bytes":31,"dir":2,"interval":30557}],"tls":{"version":"tls1.2","sni":"plbslog.umeng.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54008,"dip":"17.248.161.50","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1147,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":104}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54037,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":1342,"s2c_bytes":33765,"c2s_pkts":8,"s2c_pkts":30,"total_pkts":38,"duration":4719,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1052},{"bytes":53,"dir":1,"interval":223},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":359,"dir":1,"interval":0},{"bytes":157,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":778},{"bytes":1460,"dir":2,"interval":3},{"bytes":1254,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1254,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1183,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"i2.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54050,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1590,"s2c_bytes":52592,"c2s_pkts":8,"s2c_pkts":42,"total_pkts":50,"duration":3666,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":62,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":1198},{"bytes":58,"dir":1,"interval":1332},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":333,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":2298},{"bytes":35,"dir":1,"interval":22},{"bytes":1460,"dir":2,"interval":30},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":118,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":425,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wx4.sinaimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54049,"dip":"122.14.43.168","dport":443,"proto":"tcp","c2s_bytes":1482,"s2c_bytes":34363,"c2s_pkts":10,"s2c_pkts":28,"total_pkts":38,"duration":4202,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1734},{"bytes":53,"dir":1,"interval":1332},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":416,"dir":1,"interval":0},{"bytes":156,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":2298},{"bytes":1460,"dir":2,"interval":4},{"bytes":1325,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":158,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":20},{"bytes":42,"dir":1,"interval":2},{"bytes":38,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"i3.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54039,"dip":"122.14.43.165","dport":443,"proto":"tcp","c2s_bytes":1439,"s2c_bytes":50111,"c2s_pkts":9,"s2c_pkts":38,"total_pkts":47,"duration":4719,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1052},{"bytes":53,"dir":1,"interval":223},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":414,"dir":1,"interval":0},{"bytes":157,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":776},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1171,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":2330}],"tls":{"version":"tls1.2","sni":"i1.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54014,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1110,"s2c_bytes":22139,"c2s_pkts":7,"s2c_pkts":20,"total_pkts":27,"duration":8591,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":3},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1051},{"bytes":53,"dir":1,"interval":20},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":284,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":507},{"bytes":38,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":5},{"bytes":1292,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1069,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"w1.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54013,"dip":"121.41.48.9","dport":443,"proto":"tcp","c2s_bytes":1297,"s2c_bytes":6509,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":8564,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":31},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1938},{"bytes":616,"dir":1,"interval":1137},{"bytes":38,"dir":1,"interval":-144},{"bytes":38,"dir":2,"interval":1187},{"bytes":1246,"dir":2,"interval":269},{"bytes":1460,"dir":2,"interval":0},{"bytes":69,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bbs.mobileapi.hupu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50570,"dip":"17.57.145.70","dport":443,"proto":"tcp","c2s_bytes":222,"s2c_bytes":3734,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":3828,"packets":[{"bytes":222,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":302,"dir":2,"interval":1106}],"tls":{"version":"tls1.2","sni":"courier.push.apple.com","alpn":"\u0010apns-security-v3\fapns-pack-v1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,16,5,18,23]}}
{"sip":"192.168.50.193","sport":53997,"dip":"121.40.10.71","dport":443,"proto":"tcp","c2s_bytes":4713,"s2c_bytes":4293,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":23584,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":470,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":25},{"bytes":447,"dir":1,"interval":1291},{"bytes":941,"dir":1,"interval":0},{"bytes":223,"dir":2,"interval":137},{"bytes":447,"dir":1,"interval":7576},{"bytes":993,"dir":1,"interval":0},{"bytes":223,"dir":2,"interval":7578},{"bytes":447,"dir":1,"interval":13516},{"bytes":921,"dir":1,"interval":0},{"bytes":223,"dir":2,"interval":13515}],"tls":{"version":"tls1.2","sni":"ccdace.hupu.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54071,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1813,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54072,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1816,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54070,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1815,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53993,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":2634,"s2c_bytes":33588,"c2s_pkts":8,"s2c_pkts":26,"total_pkts":34,"duration":27572,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":126,"dir":1,"interval":310},{"bytes":392,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":82},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1039,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":25421},{"bytes":1460,"dir":2,"interval":25356},{"bytes":1460,"dir":2,"interval":0},{"bytes":1052,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1312,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":17},{"bytes":1460,"dir":2,"interval":53},{"bytes":1460,"dir":2,"interval":0},{"bytes":1190,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":52},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1316,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":724,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":1746},{"bytes":31,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53996,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1458,"s2c_bytes":14629,"c2s_pkts":5,"s2c_pkts":13,"total_pkts":18,"duration":27215,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":306},{"bytes":392,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":77},{"bytes":1460,"dir":2,"interval":0},{"bytes":1045,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1143,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":26884},{"bytes":31,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":26820},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":86,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54078,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":127,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":3}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54077,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":122,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54079,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":124,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54080,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":129,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54076,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":130,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54075,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":148,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54084,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":699,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54083,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3564,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":699,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54085,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1066,"s2c_bytes":3595,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":739,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":710},{"bytes":392,"dir":1,"interval":5},{"bytes":31,"dir":1,"interval":21},{"bytes":31,"dir":2,"interval":46}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54086,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1066,"s2c_bytes":3595,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":773,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":126,"dir":1,"interval":710},{"bytes":392,"dir":1,"interval":5},{"bytes":31,"dir":1,"interval":55},{"bytes":31,"dir":2,"interval":80}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53572,"dip":"101.71.145.130","dport":443,"proto":"tcp","c2s_bytes":2594,"s2c_bytes":13025,"c2s_pkts":12,"s2c_pkts":22,"total_pkts":34,"duration":181621,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":350,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1417},{"bytes":53,"dir":1,"interval":15},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":443,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":255,"dir":1,"interval":0},{"bytes":637,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":74},{"bytes":42,"dir":2,"interval":0},{"bytes":489,"dir":2,"interval":2},{"bytes":48,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":315,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":949,"dir":2,"interval":22},{"bytes":255,"dir":1,"interval":133},{"bytes":1320,"dir":2,"interval":127},{"bytes":1448,"dir":2,"interval":1},{"bytes":1162,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":541,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120603},{"bytes":46,"dir":2,"interval":180000},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c.m.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54036,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":2123,"s2c_bytes":14972,"c2s_pkts":21,"s2c_pkts":23,"total_pkts":44,"duration":36340,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1275},{"bytes":53,"dir":1,"interval":9},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":186,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":785},{"bytes":38,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":30},{"bytes":798,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":957},{"bytes":99,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":978},{"bytes":509,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":14940},{"bytes":103,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":1377,"dir":2,"interval":14900},{"bytes":38,"dir":2,"interval":0},{"bytes":1068,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":1102,"dir":2,"interval":23},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":48},{"bytes":1460,"dir":2,"interval":21},{"bytes":382,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":651},{"bytes":1410,"dir":2,"interval":698},{"bytes":38,"dir":2,"interval":0},{"bytes":91,"dir":1,"interval":1177},{"bytes":42,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"i2.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53984,"dip":"121.41.48.9","dport":443,"proto":"tcp","c2s_bytes":17026,"s2c_bytes":4823,"c2s_pkts":29,"s2c_pkts":18,"total_pkts":47,"duration":61391,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":235},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":302,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":578,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":54},{"bytes":342,"dir":2,"interval":28},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":34652},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":1278,"dir":1,"interval":0},{"bytes":121,"dir":2,"interval":34655},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":121},{"bytes":1440,"dir":1,"interval":0},{"bytes":502,"dir":1,"interval":0},{"bytes":97,"dir":2,"interval":120},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":6135},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":958,"dir":1,"interval":0},{"bytes":121,"dir":2,"interval":6135},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":71},{"bytes":1330,"dir":1,"interval":0},{"bytes":97,"dir":2,"interval":110},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":1805},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":538,"dir":1,"interval":0},{"bytes":121,"dir":2,"interval":1766},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":1160},{"bytes":1200,"dir":1,"interval":0},{"bytes":130,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"hermes.hupu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53905,"dip":"221.204.173.224","dport":443,"proto":"tcp","c2s_bytes":1752,"s2c_bytes":7834,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":122320,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":11},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2263},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":301,"dir":1,"interval":0},{"bytes":594,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":41},{"bytes":1429,"dir":2,"interval":34},{"bytes":1460,"dir":2,"interval":0},{"bytes":1398,"dir":2,"interval":0},{"bytes":308,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":119998},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120048}],"tls":{"version":"tls1.2","sni":"is.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54088,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1458,"s2c_bytes":13026,"c2s_pkts":5,"s2c_pkts":12,"total_pkts":17,"duration":30963,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":713},{"bytes":392,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":86},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":122,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":90},{"bytes":1460,"dir":2,"interval":92},{"bytes":580,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30149}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54087,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1458,"s2c_bytes":22586,"c2s_pkts":5,"s2c_pkts":19,"total_pkts":24,"duration":30965,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":708},{"bytes":392,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":90},{"bytes":1460,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":530,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":76},{"bytes":1460,"dir":2,"interval":78},{"bytes":1460,"dir":2,"interval":0},{"bytes":1046,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0},{"bytes":588,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30171}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54090,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1458,"s2c_bytes":17548,"c2s_pkts":5,"s2c_pkts":14,"total_pkts":19,"duration":30962,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":710},{"bytes":392,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":94},{"bytes":1460,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1323,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":74},{"bytes":1460,"dir":2,"interval":36},{"bytes":1460,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1285,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30168}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54091,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1066,"s2c_bytes":11638,"c2s_pkts":4,"s2c_pkts":10,"total_pkts":14,"duration":32292,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":1623},{"bytes":392,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":1169},{"bytes":1460,"dir":2,"interval":0},{"bytes":1044,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1190,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30660}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54093,"dip":"121.41.49.36","dport":443,"proto":"tcp","c2s_bytes":1298,"s2c_bytes":7817,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":31242,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1097},{"bytes":53,"dir":1,"interval":5},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":472,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":57},{"bytes":1460,"dir":2,"interval":41},{"bytes":1460,"dir":2,"interval":0},{"bytes":1201,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bbs.mobileapi.hupu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54095,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1253,"s2c_bytes":34985,"c2s_pkts":3,"s2c_pkts":27,"total_pkts":30,"duration":30411,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":333},{"bytes":610,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":82},{"bytes":1460,"dir":2,"interval":0},{"bytes":1054,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1205,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":951,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54094,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1155,"s2c_bytes":6136,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":33874,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2118},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":1},{"bytes":42,"dir":1,"interval":0},{"bytes":329,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":1034},{"bytes":38,"dir":1,"interval":2},{"bytes":1293,"dir":2,"interval":3},{"bytes":1125,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"w1.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54089,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":2634,"s2c_bytes":42634,"c2s_pkts":8,"s2c_pkts":34,"total_pkts":42,"duration":45134,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":402,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":702},{"bytes":392,"dir":1,"interval":12},{"bytes":1460,"dir":2,"interval":80},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":222,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":68},{"bytes":1460,"dir":2,"interval":47},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1278,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":76},{"bytes":1460,"dir":2,"interval":107},{"bytes":1460,"dir":2,"interval":0},{"bytes":1045,"dir":2,"interval":0},{"bytes":1142,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":86},{"bytes":1460,"dir":2,"interval":74},{"bytes":1460,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":732,"dir":2,"interval":0},{"bytes":392,"dir":1,"interval":13251},{"bytes":1460,"dir":2,"interval":13199},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1032,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":191,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30936}],"tls":{"version":"tls1.2","sni":"c1.hoopchina.com.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54023,"dip":"122.14.43.42","dport":443,"proto":"tcp","c2s_bytes":8335,"s2c_bytes":113815,"c2s_pkts":72,"s2c_pkts":128,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":748},{"bytes":53,"dir":1,"interval":22},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":172,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":762},{"bytes":38,"dir":1,"interval":6},{"bytes":1460,"dir":2,"interval":5},{"bytes":81,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":91,"dir":1,"interval":13704},{"bytes":1460,"dir":2,"interval":13733},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":756,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":3016},{"bytes":1460,"dir":2,"interval":3039},{"bytes":10,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":773},{"bytes":1029,"dir":2,"interval":771},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":209},{"bytes":1267,"dir":2,"interval":188},{"bytes":38,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":216},{"bytes":1460,"dir":2,"interval":191},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":124,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":1141},{"bytes":101,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":103,"dir":1,"interval":0},{"bytes":1439,"dir":2,"interval":1187},{"bytes":38,"dir":2,"interval":0},{"bytes":1315,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":797,"dir":2,"interval":50},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":180,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":840},{"bytes":91,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":781},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":822,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":336},{"bytes":100,"dir":1,"interval":27062},{"bytes":1460,"dir":2,"interval":27359},{"bytes":1460,"dir":2,"interval":0},{"bytes":288,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":5948},{"bytes":84,"dir":1,"interval":0},{"bytes":155,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":5948},{"bytes":1198,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1086,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":364,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":84,"dir":1,"interval":47},{"bytes":938,"dir":2,"interval":33},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":213},{"bytes":1159,"dir":2,"interval":210},{"bytes":1213,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":166,"dir":1,"interval":247},{"bytes":1460,"dir":2,"interval":268},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1345,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":209},{"bytes":795,"dir":2,"interval":233},{"bytes":696,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":51},{"bytes":102,"dir":1,"interval":4},{"bytes":1293,"dir":2,"interval":8},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":11},{"bytes":1460,"dir":2,"interval":11},{"bytes":361,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":557},{"bytes":1408,"dir":2,"interval":560},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":10},{"bytes":1460,"dir":2,"interval":11},{"bytes":1184,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":398},{"bytes":102,"dir":1,"interval":0},{"bytes":84,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":93,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":653,"dir":1,"interval":1},{"bytes":1297,"dir":2,"interval":407},{"bytes":38,"dir":2,"interval":0},{"bytes":1304,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1013,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":410},{"bytes":1460,"dir":2,"interval":395},{"bytes":1184,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":91,"dir":1,"interval":835},{"bytes":1460,"dir":2,"interval":832},{"bytes":950,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":99,"dir":1,"interval":1016},{"bytes":101,"dir":1,"interval":27},{"bytes":1460,"dir":2,"interval":1044},{"bytes":957,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":27},{"bytes":325,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":516},{"bytes":101,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":497},{"bytes":1460,"dir":2,"interval":0},{"bytes":2,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":966,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":562},{"bytes":101,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":601},{"bytes":508,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":748,"dir":2,"interval":49},{"bytes":822,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":222}],"tls":{"version":"tls1.2","sni":"i3.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54116,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1253,"s2c_bytes":48107,"c2s_pkts":3,"s2c_pkts":36,"total_pkts":39,"duration":9476,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":417,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":1220},{"bytes":610,"dir":1,"interval":19},{"bytes":1460,"dir":2,"interval":3820},{"bytes":1460,"dir":2,"interval":0},{"bytes":1308,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":511,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"c2.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54107,"dip":"121.41.49.36","dport":443,"proto":"tcp","c2s_bytes":1297,"s2c_bytes":5845,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":11683,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2042},{"bytes":53,"dir":1,"interval":6},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":471,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":73},{"bytes":1247,"dir":2,"interval":49},{"bytes":864,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"bbs.mobileapi.hupu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54115,"dip":"122.14.43.168","dport":443,"proto":"tcp","c2s_bytes":1185,"s2c_bytes":5550,"c2s_pkts":7,"s2c_pkts":9,"total_pkts":16,"duration":9507,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":325},{"bytes":53,"dir":1,"interval":20},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":47},{"bytes":359,"dir":1,"interval":171},{"bytes":38,"dir":1,"interval":-12},{"bytes":1460,"dir":2,"interval":177},{"bytes":372,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"i3.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54130,"dip":"163.177.92.114","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":1,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"access.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54129,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":10001,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54120,"dip":"203.119.207.252","dport":443,"proto":"tcp","c2s_bytes":2310,"s2c_bytes":8811,"c2s_pkts":3,"s2c_pkts":9,"total_pkts":12,"duration":21962,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0},{"bytes":438,"dir":1,"interval":384},{"bytes":1355,"dir":1,"interval":3}],"tls":{"version":"tls1.2","sni":"ulogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54108,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":3618,"s2c_bytes":73033,"c2s_pkts":34,"s2c_pkts":89,"total_pkts":123,"duration":33740,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":782},{"bytes":53,"dir":1,"interval":10},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":186,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":27},{"bytes":1323,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":530,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":3889},{"bytes":99,"dir":1,"interval":0},{"bytes":1149,"dir":2,"interval":3888},{"bytes":1460,"dir":2,"interval":0},{"bytes":1032,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":821,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":157,"dir":1,"interval":47},{"bytes":1460,"dir":2,"interval":44},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":135,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":641},{"bytes":1460,"dir":2,"interval":639},{"bytes":1460,"dir":2,"interval":0},{"bytes":349,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":27},{"bytes":1150,"dir":2,"interval":26},{"bytes":917,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":353},{"bytes":1384,"dir":2,"interval":354},{"bytes":38,"dir":2,"interval":0},{"bytes":92,"dir":1,"interval":68},{"bytes":1460,"dir":2,"interval":67},{"bytes":756,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":181},{"bytes":1460,"dir":2,"interval":182},{"bytes":1031,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":92,"dir":1,"interval":21},{"bytes":1210,"dir":2,"interval":23},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":409},{"bytes":42,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":407},{"bytes":1085,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1003,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1252,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":110,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":469,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":1246},{"bytes":101,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1150,"dir":2,"interval":1226},{"bytes":1460,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":997},{"bytes":1405,"dir":2,"interval":999},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":564},{"bytes":91,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":794,"dir":2,"interval":586},{"bytes":1460,"dir":2,"interval":0},{"bytes":129,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":170,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":752,"dir":2,"interval":49},{"bytes":1089,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":204,"dir":1,"interval":2445},{"bytes":103,"dir":1,"interval":-638},{"bytes":1460,"dir":2,"interval":2406},{"bytes":204,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1152,"dir":2,"interval":1},{"bytes":305,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1172,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":22693}],"tls":{"version":"tls1.2","sni":"i2.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54119,"dip":"121.40.10.71","dport":443,"proto":"tcp","c2s_bytes":2329,"s2c_bytes":3847,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":22056,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":470,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":25},{"bytes":448,"dir":1,"interval":1836},{"bytes":1333,"dir":1,"interval":19},{"bytes":223,"dir":2,"interval":1056},{"bytes":31,"dir":1,"interval":20201}],"tls":{"version":"tls1.2","sni":"ccdace.hupu.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54139,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":796,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"mtrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50808,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2124,"s2c_bytes":4348,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":61,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":525,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":29},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":27},{"bytes":637,"dir":1,"interval":10},{"bytes":1188,"dir":1,"interval":0},{"bytes":892,"dir":2,"interval":18}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50815,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2082,"s2c_bytes":458,"c2s_pkts":5,"s2c_pkts":2,"total_pkts":7,"duration":49,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":6,"dir":1,"interval":17},{"bytes":45,"dir":1,"interval":0},{"bytes":654,"dir":1,"interval":0},{"bytes":1172,"dir":1,"interval":0},{"bytes":321,"dir":2,"interval":24}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50819,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":1899,"s2c_bytes":3966,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":168,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":830,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":65},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":63},{"bytes":478,"dir":1,"interval":48},{"bytes":1125,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":54},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":50821,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2088,"s2c_bytes":968,"c2s_pkts":5,"s2c_pkts":2,"total_pkts":7,"duration":103,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":6,"dir":1,"interval":23},{"bytes":45,"dir":1,"interval":0},{"bytes":655,"dir":1,"interval":0},{"bytes":1177,"dir":1,"interval":0},{"bytes":831,"dir":2,"interval":35}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54207,"dip":"58.250.137.94","dport":443,"proto":"tcp","c2s_bytes":1137,"s2c_bytes":4292,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":619,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":953,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":270},{"bytes":51,"dir":2,"interval":155},{"bytes":348,"dir":1,"interval":140},{"bytes":115,"dir":1,"interval":2},{"bytes":408,"dir":2,"interval":150},{"bytes":31,"dir":1,"interval":202}],"tls":{"version":"tls1.2","sni":"api.poll.aiseet.atianqi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53782,"dip":"203.209.230.253","dport":443,"proto":"tcp","c2s_bytes":2847,"s2c_bytes":6190,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":207760,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":1118,"dir":2,"interval":42},{"bytes":258,"dir":2,"interval":42},{"bytes":126,"dir":1,"interval":1021},{"bytes":414,"dir":1,"interval":102},{"bytes":1440,"dir":1,"interval":0},{"bytes":319,"dir":1,"interval":0},{"bytes":718,"dir":2,"interval":315},{"bytes":31,"dir":1,"interval":30380}],"tls":{"version":"tls1.2","sni":"mobilegw.alipay.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54180,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":1191,"s2c_bytes":5438,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":10337,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":105,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":91},{"bytes":51,"dir":2,"interval":90},{"bytes":300,"dir":1,"interval":113},{"bytes":217,"dir":1,"interval":0},{"bytes":967,"dir":2,"interval":125},{"bytes":31,"dir":2,"interval":9999},{"bytes":31,"dir":1,"interval":10132}],"tls":{"version":"tls1.2","sni":"api.unipay.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54186,"dip":"113.96.232.166","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":4734,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":10209,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":77},{"bytes":51,"dir":2,"interval":76},{"bytes":268,"dir":1,"interval":86},{"bytes":267,"dir":2,"interval":86},{"bytes":31,"dir":2,"interval":10000},{"bytes":31,"dir":1,"interval":10045}],"tls":{"version":"tls1.2","sni":"113.96.232.166","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54189,"dip":"157.255.192.104","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":4734,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":10429,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":154},{"bytes":51,"dir":2,"interval":152},{"bytes":268,"dir":1,"interval":228},{"bytes":267,"dir":2,"interval":227},{"bytes":31,"dir":2,"interval":10002},{"bytes":31,"dir":1,"interval":10046}],"tls":{"version":"tls1.2","sni":"157.255.192.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54197,"dip":"58.251.116.12","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":4734,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":10377,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":154},{"bytes":51,"dir":2,"interval":148},{"bytes":268,"dir":1,"interval":162},{"bytes":267,"dir":2,"interval":163},{"bytes":31,"dir":2,"interval":10001},{"bytes":31,"dir":1,"interval":10059}],"tls":{"version":"tls1.2","sni":"58.251.116.12","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54201,"dip":"58.60.9.101","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":4734,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":10322,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":152},{"bytes":51,"dir":2,"interval":150},{"bytes":268,"dir":1,"interval":115},{"bytes":267,"dir":2,"interval":115},{"bytes":31,"dir":2,"interval":10000},{"bytes":31,"dir":1,"interval":10055}],"tls":{"version":"tls1.2","sni":"58.60.9.101","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54203,"dip":"220.194.91.117","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":4734,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":10087,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":65,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":28},{"bytes":51,"dir":2,"interval":26},{"bytes":268,"dir":1,"interval":43},{"bytes":267,"dir":2,"interval":43},{"bytes":31,"dir":2,"interval":10002},{"bytes":31,"dir":1,"interval":10015}],"tls":{"version":"tls1.2","sni":"220.194.91.117","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54206,"dip":"111.161.111.27","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":4734,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":10335,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":65,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":117},{"bytes":51,"dir":2,"interval":115},{"bytes":268,"dir":1,"interval":207},{"bytes":267,"dir":2,"interval":209},{"bytes":31,"dir":2,"interval":10000},{"bytes":31,"dir":1,"interval":10010}],"tls":{"version":"tls1.2","sni":"111.161.111.27","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54209,"dip":"223.167.154.62","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":4734,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":10317,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":1428,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":137},{"bytes":51,"dir":2,"interval":134},{"bytes":268,"dir":1,"interval":138},{"bytes":267,"dir":2,"interval":138},{"bytes":31,"dir":2,"interval":10000},{"bytes":31,"dir":1,"interval":10040}],"tls":{"version":"tls1.2","sni":"223.167.154.62","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54210,"dip":"223.167.84.120","dport":443,"proto":"tcp","c2s_bytes":942,"s2c_bytes":4734,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":10313,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":65,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":181},{"bytes":51,"dir":2,"interval":178},{"bytes":268,"dir":1,"interval":37},{"bytes":267,"dir":2,"interval":37},{"bytes":31,"dir":2,"interval":10000},{"bytes":31,"dir":1,"interval":10095}],"tls":{"version":"tls1.2","sni":"223.167.84.120","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50803,"dip":"17.57.145.72","dport":443,"proto":"tcp","c2s_bytes":372,"s2c_bytes":3423,"c2s_pkts":4,"s2c_pkts":3,"total_pkts":7,"duration":19383,"packets":[{"bytes":222,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":543,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":161},{"bytes":6,"dir":1,"interval":0},{"bytes":69,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"courier.push.apple.com","alpn":"\u0010apns-security-v3\fapns-pack-v1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,16,5,18,23]}}
{"sip":"192.168.50.193","sport":54182,"dip":"69.63.176.59","dport":443,"proto":"tcp","c2s_bytes":635,"s2c_bytes":4218,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":19384,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":600,"dir":2,"interval":0},{"bytes":738,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":165}],"tls":{"version":"tls1.2","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54179,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":5169,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":19717,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":10},{"bytes":126,"dir":1,"interval":524}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51451,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":3082,"s2c_bytes":342,"c2s_pkts":3,"s2c_pkts":3,"total_pkts":6,"duration":2291,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":1651},{"bytes":1440,"dir":1,"interval":-244},{"bytes":171,"dir":2,"interval":1657},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54177,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":2702,"s2c_bytes":4018,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":33315,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":845,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":67},{"bytes":51,"dir":2,"interval":64},{"bytes":487,"dir":1,"interval":55},{"bytes":1440,"dir":1,"interval":7},{"bytes":101,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":76},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33141}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54215,"dip":"17.248.161.44","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":7116,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":19783,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":988,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":295}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54216,"dip":"69.63.176.59","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":4218,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":19371,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":138,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":174}],"tls":{"version":"tls1.2","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54222,"dip":"69.63.176.59","dport":443,"proto":"tcp","c2s_bytes":193,"s2c_bytes":7,"c2s_pkts":1,"s2c_pkts":1,"total_pkts":2,"duration":1055,"packets":[{"bytes":193,"dir":1,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54212,"dip":"14.215.138.36","dport":443,"proto":"tcp","c2s_bytes":1276,"s2c_bytes":3939,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31626,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":809,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":175},{"bytes":51,"dir":2,"interval":173},{"bytes":602,"dir":1,"interval":113},{"bytes":383,"dir":2,"interval":177},{"bytes":31,"dir":1,"interval":31298}],"tls":{"version":"tls1.2","sni":"ptlogin.qidian.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51663,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2206,"s2c_bytes":458,"c2s_pkts":5,"s2c_pkts":2,"total_pkts":7,"duration":54,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":6,"dir":1,"interval":28},{"bytes":45,"dir":1,"interval":0},{"bytes":720,"dir":1,"interval":0},{"bytes":1230,"dir":1,"interval":0},{"bytes":321,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54178,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":3116,"s2c_bytes":4785,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":45268,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":58},{"bytes":51,"dir":2,"interval":50},{"bytes":73,"dir":2,"interval":0},{"bytes":626,"dir":1,"interval":163},{"bytes":620,"dir":1,"interval":0},{"bytes":553,"dir":1,"interval":0},{"bytes":553,"dir":1,"interval":0},{"bytes":139,"dir":2,"interval":167},{"bytes":37,"dir":2,"interval":0},{"bytes":67,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":81},{"bytes":45,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":45001},{"bytes":31,"dir":1,"interval":44964}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54218,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":5169,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":19784,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":9},{"bytes":126,"dir":1,"interval":584}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54223,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":201,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":481,"packets":[{"bytes":201,"dir":1,"interval":0}],"tls":{"version":"tls1.0","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51870,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":1779,"s2c_bytes":342,"c2s_pkts":5,"s2c_pkts":3,"total_pkts":8,"duration":101,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":6,"dir":1,"interval":46},{"bytes":45,"dir":1,"interval":0},{"bytes":478,"dir":1,"interval":0},{"bytes":1048,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":56},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54221,"dip":"17.248.161.44","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":7116,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":19379,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":988,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":183}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54226,"dip":"17.248.161.137","dport":443,"proto":"tcp","c2s_bytes":207,"s2c_bytes":7,"c2s_pkts":1,"s2c_pkts":1,"total_pkts":2,"duration":152,"packets":[{"bytes":207,"dir":1,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54157,"dip":"183.3.234.190","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":60042,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"wuji.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54146,"dip":"203.119.244.125","dport":443,"proto":"tcp","c2s_bytes":2638,"s2c_bytes":10197,"c2s_pkts":6,"s2c_pkts":13,"total_pkts":19,"duration":60066,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1370,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":30},{"bytes":51,"dir":2,"interval":27},{"bytes":73,"dir":2,"interval":0},{"bytes":556,"dir":1,"interval":15},{"bytes":1363,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":23},{"bytes":68,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":26},{"bytes":31,"dir":2,"interval":60000},{"bytes":31,"dir":1,"interval":59993}],"tls":{"version":"tls1.2","sni":"ulogs.umengcloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54167,"dip":"203.119.207.252","dport":443,"proto":"tcp","c2s_bytes":9178,"s2c_bytes":13153,"c2s_pkts":15,"s2c_pkts":20,"total_pkts":35,"duration":61252,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1370,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":39},{"bytes":51,"dir":2,"interval":36},{"bytes":73,"dir":2,"interval":0},{"bytes":551,"dir":1,"interval":18},{"bytes":1379,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":38},{"bytes":68,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":39},{"bytes":543,"dir":1,"interval":22},{"bytes":1440,"dir":1,"interval":0},{"bytes":78,"dir":1,"interval":0},{"bytes":818,"dir":2,"interval":45},{"bytes":37,"dir":2,"interval":0},{"bytes":545,"dir":1,"interval":38},{"bytes":1198,"dir":1,"interval":0},{"bytes":1429,"dir":2,"interval":40},{"bytes":62,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":543,"dir":1,"interval":73},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":536,"dir":2,"interval":103},{"bytes":37,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":60000},{"bytes":31,"dir":1,"interval":61019}],"tls":{"version":"tls1.2","sni":"ulogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54181,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1369,"s2c_bytes":11787,"c2s_pkts":8,"s2c_pkts":15,"total_pkts":23,"duration":60231,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":96},{"bytes":43,"dir":2,"interval":93},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":97},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":593,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":96},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1016,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1135,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60037}],"tls":{"version":"tls1.2","sni":"bag.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54183,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1313,"s2c_bytes":10248,"c2s_pkts":8,"s2c_pkts":14,"total_pkts":22,"duration":60288,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":187},{"bytes":43,"dir":2,"interval":183},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":58},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":537,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":58},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1019,"dir":2,"interval":0},{"bytes":1053,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60042}],"tls":{"version":"tls1.2","sni":"bag.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54185,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1105,"s2c_bytes":4552,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":60181,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":110},{"bytes":250,"dir":2,"interval":108},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":37},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":329,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":38},{"bytes":293,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60002},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60032}],"tls":{"version":"tls1.2","sni":"apps.mzstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54175,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1773,"s2c_bytes":12277,"c2s_pkts":10,"s2c_pkts":17,"total_pkts":27,"duration":61220,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":65},{"bytes":43,"dir":2,"interval":61},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":24},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":509,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":23},{"bytes":1210,"dir":2,"interval":2},{"bytes":1417,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":353,"dir":1,"interval":1097},{"bytes":135,"dir":1,"interval":0},{"bytes":1226,"dir":2,"interval":1105},{"bytes":986,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":692,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60031}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54190,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1369,"s2c_bytes":11789,"c2s_pkts":8,"s2c_pkts":15,"total_pkts":23,"duration":60195,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":47},{"bytes":43,"dir":2,"interval":46},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":106},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":593,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":106},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1016,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1137,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60005},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60040}],"tls":{"version":"tls1.2","sni":"bag.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54191,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1369,"s2c_bytes":11817,"c2s_pkts":8,"s2c_pkts":15,"total_pkts":23,"duration":60409,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":3},{"bytes":85,"dir":1,"interval":156},{"bytes":43,"dir":2,"interval":153},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":198},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":593,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":197},{"bytes":1460,"dir":2,"interval":1},{"bytes":1187,"dir":2,"interval":0},{"bytes":1318,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1136,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60054}],"tls":{"version":"tls1.2","sni":"bag.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54193,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":2369,"s2c_bytes":24681,"c2s_pkts":9,"s2c_pkts":23,"total_pkts":32,"duration":60702,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":228},{"bytes":250,"dir":2,"interval":225},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":81},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":133,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":83},{"bytes":1460,"dir":2,"interval":11},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":296,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60391}],"tls":{"version":"tls1.2","sni":"api.apps.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54196,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1105,"s2c_bytes":4552,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":60392,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":88},{"bytes":250,"dir":2,"interval":83},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":58},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":329,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":57},{"bytes":293,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":60003},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60246}],"tls":{"version":"tls1.2","sni":"apps.mzstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54192,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":2048,"s2c_bytes":6344,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":60811,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":106},{"bytes":43,"dir":2,"interval":104},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":50},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":507,"dir":1,"interval":0},{"bytes":765,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":49},{"bytes":1088,"dir":2,"interval":325},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60002},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60654}],"tls":{"version":"tls1.2","sni":"play.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54195,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1369,"s2c_bytes":11788,"c2s_pkts":8,"s2c_pkts":15,"total_pkts":23,"duration":60465,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":71},{"bytes":43,"dir":2,"interval":70},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":73},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":593,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":71},{"bytes":1460,"dir":2,"interval":148},{"bytes":1460,"dir":2,"interval":0},{"bytes":1016,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1136,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60002},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60321}],"tls":{"version":"tls1.2","sni":"bag.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54198,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1105,"s2c_bytes":4552,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":60302,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":154},{"bytes":250,"dir":2,"interval":152},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":101},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":329,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":102},{"bytes":293,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60002},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60046}],"tls":{"version":"tls1.2","sni":"apps.mzstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54199,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":2370,"s2c_bytes":12498,"c2s_pkts":9,"s2c_pkts":15,"total_pkts":24,"duration":60347,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":85,"dir":1,"interval":228},{"bytes":250,"dir":2,"interval":226},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":73},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":72},{"bytes":1221,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":157,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60044}],"tls":{"version":"tls1.2","sni":"api.apps.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54200,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":1105,"s2c_bytes":4552,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":60980,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":937,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":145},{"bytes":250,"dir":2,"interval":143},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":120},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":329,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":119},{"bytes":293,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60002},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60713}],"tls":{"version":"tls1.2","sni":"apps.mzstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54202,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":2370,"s2c_bytes":12528,"c2s_pkts":9,"s2c_pkts":17,"total_pkts":26,"duration":60834,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":85,"dir":1,"interval":133},{"bytes":250,"dir":2,"interval":130},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":102},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":3},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":103},{"bytes":1460,"dir":2,"interval":59},{"bytes":1221,"dir":2,"interval":0},{"bytes":1335,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":127,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60001},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60593}],"tls":{"version":"tls1.2","sni":"api.apps.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54205,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":2369,"s2c_bytes":24711,"c2s_pkts":9,"s2c_pkts":23,"total_pkts":32,"duration":60464,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":131},{"bytes":250,"dir":2,"interval":129},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":161},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":133,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":160},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1041,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1206,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":999,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60000},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60171}],"tls":{"version":"tls1.2","sni":"api.apps.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54204,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":10035,"s2c_bytes":10553,"c2s_pkts":15,"s2c_pkts":25,"total_pkts":40,"duration":60973,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":935,"dir":2,"interval":2},{"bytes":85,"dir":1,"interval":129},{"bytes":43,"dir":2,"interval":126},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":65},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":495,"dir":1,"interval":0},{"bytes":516,"dir":1,"interval":0},{"bytes":533,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":64},{"bytes":639,"dir":1,"interval":168},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1266,"dir":1,"interval":0},{"bytes":635,"dir":2,"interval":420},{"bytes":30,"dir":2,"interval":0},{"bytes":638,"dir":2,"interval":7},{"bytes":30,"dir":2,"interval":0},{"bytes":636,"dir":2,"interval":3},{"bytes":30,"dir":2,"interval":0},{"bytes":637,"dir":2,"interval":2},{"bytes":30,"dir":2,"interval":0},{"bytes":636,"dir":2,"interval":2},{"bytes":30,"dir":2,"interval":0},{"bytes":636,"dir":2,"interval":138},{"bytes":30,"dir":2,"interval":0},{"bytes":636,"dir":2,"interval":168},{"bytes":30,"dir":2,"interval":0},{"bytes":633,"dir":2,"interval":4},{"bytes":30,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":60003},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":60607}],"tls":{"version":"tls1.2","sni":"pd.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54228,"dip":"122.14.43.188","dport":443,"proto":"tcp","c2s_bytes":703,"s2c_bytes":130223,"c2s_pkts":8,"s2c_pkts":93,"total_pkts":101,"duration":6958,"packets":[{"bytes":226,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":439,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":22},{"bytes":51,"dir":2,"interval":17},{"bytes":53,"dir":1,"interval":10},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":159,"dir":1,"interval":0},{"bytes":78,"dir":2,"interval":14},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":8},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1262},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":1289},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":10},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":713,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gw.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54239,"dip":"101.71.154.226","dport":443,"proto":"tcp","c2s_bytes":1205,"s2c_bytes":3690,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":3872,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":384,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":40},{"bytes":51,"dir":2,"interval":37},{"bytes":595,"dir":1,"interval":109},{"bytes":310,"dir":2,"interval":110},{"bytes":49,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"channel.m.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54241,"dip":"101.71.154.226","dport":443,"proto":"tcp","c2s_bytes":1232,"s2c_bytes":3675,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":3679,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":369,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":46},{"bytes":51,"dir":2,"interval":44},{"bytes":622,"dir":1,"interval":45},{"bytes":310,"dir":2,"interval":46},{"bytes":49,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"channel.m.163.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53922,"dip":"122.14.43.166","dport":443,"proto":"tcp","c2s_bytes":4737,"s2c_bytes":4370,"c2s_pkts":12,"s2c_pkts":12,"total_pkts":24,"duration":240671,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1051},{"bytes":53,"dir":1,"interval":11},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":202,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":1053},{"bytes":684,"dir":2,"interval":9},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":165,"dir":1,"interval":90},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":2},{"bytes":593,"dir":1,"interval":0},{"bytes":323,"dir":2,"interval":139},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":120000},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":239514}],"tls":{"version":"tls1.2","sni":"bds.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53927,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":1394,"s2c_bytes":4058,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":239621,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":1},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":37},{"bytes":53,"dir":1,"interval":4},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":537,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":29},{"bytes":781,"dir":2,"interval":40},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":120000},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":239578}],"tls":{"version":"tls1.2","sni":"i.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53935,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":1129,"s2c_bytes":86331,"c2s_pkts":10,"s2c_pkts":65,"total_pkts":75,"duration":239582,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":74},{"bytes":53,"dir":1,"interval":3},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":153,"dir":1,"interval":0},{"bytes":77,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":13},{"bytes":38,"dir":1,"interval":1},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1418,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1021,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":44},{"bytes":46,"dir":2,"interval":119996},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":239458}],"tls":{"version":"tls1.2","sni":"sf3-ttcdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53910,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":1155,"s2c_bytes":4101,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":241675,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":1},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1003},{"bytes":443,"dir":1,"interval":1051},{"bytes":38,"dir":2,"interval":2026},{"bytes":824,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":10},{"bytes":46,"dir":2,"interval":120000},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":239609}],"tls":{"version":"tls1.2","sni":"sf3-ttcdn-tos.pstatp.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52358,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":944,"s2c_bytes":5549,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":679,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":68},{"bytes":680,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":593},{"bytes":226,"dir":2,"interval":522},{"bytes":544,"dir":1,"interval":30},{"bytes":299,"dir":2,"interval":67}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52460,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":962,"s2c_bytes":7256,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":103,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":680,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":33},{"bytes":226,"dir":2,"interval":31},{"bytes":562,"dir":1,"interval":7},{"bytes":1448,"dir":2,"interval":49},{"bytes":558,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52355,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":1288,"s2c_bytes":5859,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":704,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":68},{"bytes":680,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":592},{"bytes":226,"dir":2,"interval":521},{"bytes":888,"dir":1,"interval":30},{"bytes":609,"dir":2,"interval":83}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52359,"dip":"125.39.11.16","dport":443,"proto":"tcp","c2s_bytes":980,"s2c_bytes":5584,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":697,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":680,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":579},{"bytes":226,"dir":2,"interval":577},{"bytes":580,"dir":1,"interval":31},{"bytes":334,"dir":2,"interval":89}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52353,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":1013,"s2c_bytes":13386,"c2s_pkts":3,"s2c_pkts":11,"total_pkts":14,"duration":735,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":68},{"bytes":680,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":593},{"bytes":226,"dir":2,"interval":522},{"bytes":613,"dir":1,"interval":30},{"bytes":1448,"dir":2,"interval":102},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":9},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":896,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":52357,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":1072,"s2c_bytes":19292,"c2s_pkts":3,"s2c_pkts":15,"total_pkts":18,"duration":935,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":68},{"bytes":680,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":593},{"bytes":226,"dir":2,"interval":522},{"bytes":672,"dir":1,"interval":31},{"bytes":1448,"dir":2,"interval":246},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1010,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":54257,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":976,"s2c_bytes":17327,"c2s_pkts":4,"s2c_pkts":14,"total_pkts":18,"duration":149,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":656,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":32},{"bytes":43,"dir":2,"interval":27},{"bytes":351,"dir":1,"interval":13},{"bytes":1460,"dir":2,"interval":25},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":568,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":101}],"tls":{"version":"tls1.2","sni":"anchorpost.msstatic.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54267,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5662,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":11,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":641,"dir":2,"interval":0},{"bytes":641,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"anchorpost.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54262,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":602,"s2c_bytes":5079,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":317,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":656,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":115},{"bytes":43,"dir":2,"interval":109}],"tls":{"version":"tls1.2","sni":"huyaimg.msstatic.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52356,"dip":"220.194.76.32","dport":443,"proto":"tcp","c2s_bytes":966,"s2c_bytes":111557,"c2s_pkts":3,"s2c_pkts":79,"total_pkts":82,"duration":1978,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":68},{"bytes":680,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":593},{"bytes":226,"dir":2,"interval":523},{"bytes":566,"dir":1,"interval":30},{"bytes":1448,"dir":2,"interval":547},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":15},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":146},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":16},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":17},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":33},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":72},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":108},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":1448,"dir":2,"interval":5},{"bytes":603,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":54285,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1136,"s2c_bytes":265733,"c2s_pkts":12,"s2c_pkts":188,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":161},{"bytes":43,"dir":2,"interval":153},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":154},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":135,"dir":1,"interval":0},{"bytes":73,"dir":1,"interval":0},{"bytes":73,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":154},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":139,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":323},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":8},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":50},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":439},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":7},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":69},{"bytes":1460,"dir":2,"interval":27},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":205,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":23},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"kiwistatic.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51133,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2648,"s2c_bytes":3975,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":65918,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":525,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":39},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":37},{"bytes":1440,"dir":1,"interval":11},{"bytes":912,"dir":1,"interval":0},{"bytes":519,"dir":2,"interval":16}],"tls":{"version":"tls1.2","sni":"p.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54229,"dip":"17.248.161.14","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":4835,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":19132,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":755,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":174}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54224,"dip":"17.167.194.224","dport":443,"proto":"tcp","c2s_bytes":1931,"s2c_bytes":3782,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":31268,"packets":[{"bytes":532,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1174,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":417},{"bytes":258,"dir":2,"interval":236},{"bytes":307,"dir":1,"interval":193},{"bytes":968,"dir":1,"interval":4},{"bytes":318,"dir":2,"interval":196},{"bytes":31,"dir":1,"interval":30653}],"tls":{"version":"tls1.2","sni":"gsp64-ssl.ls.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10]}}
{"sip":"192.168.50.193","sport":52352,"dip":"220.194.123.131","dport":443,"proto":"tcp","c2s_bytes":11913,"s2c_bytes":162535,"c2s_pkts":54,"s2c_pkts":146,"total_pkts":200,"duration":0,"packets":[{"bytes":276,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":68},{"bytes":680,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":593},{"bytes":226,"dir":2,"interval":522},{"bytes":447,"dir":1,"interval":30},{"bytes":258,"dir":2,"interval":30},{"bytes":35,"dir":1,"interval":9},{"bytes":31,"dir":2,"interval":8},{"bytes":180,"dir":1,"interval":85},{"bytes":152,"dir":1,"interval":13},{"bytes":180,"dir":1,"interval":1},{"bytes":292,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":98},{"bytes":214,"dir":2,"interval":24},{"bytes":310,"dir":1,"interval":44},{"bytes":266,"dir":1,"interval":0},{"bytes":327,"dir":2,"interval":61},{"bytes":295,"dir":1,"interval":53},{"bytes":1448,"dir":2,"interval":28},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":2},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":53},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":8},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":838,"dir":2,"interval":0},{"bytes":654,"dir":1,"interval":190},{"bytes":336,"dir":1,"interval":6},{"bytes":888,"dir":2,"interval":97},{"bytes":1142,"dir":2,"interval":5},{"bytes":248,"dir":1,"interval":569},{"bytes":1448,"dir":2,"interval":585},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":664,"dir":2,"interval":0},{"bytes":44,"dir":1,"interval":2845},{"bytes":40,"dir":2,"interval":2784},{"bytes":334,"dir":1,"interval":4835},{"bytes":1448,"dir":2,"interval":4892},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":469,"dir":2,"interval":0},{"bytes":204,"dir":1,"interval":593},{"bytes":180,"dir":1,"interval":0},{"bytes":214,"dir":2,"interval":574},{"bytes":996,"dir":2,"interval":89},{"bytes":368,"dir":1,"interval":157},{"bytes":339,"dir":1,"interval":1},{"bytes":186,"dir":1,"interval":16},{"bytes":190,"dir":1,"interval":4},{"bytes":323,"dir":2,"interval":70},{"bytes":338,"dir":1,"interval":28},{"bytes":137,"dir":2,"interval":21},{"bytes":1082,"dir":2,"interval":5},{"bytes":888,"dir":2,"interval":25},{"bytes":221,"dir":2,"interval":9},{"bytes":337,"dir":1,"interval":64},{"bytes":887,"dir":2,"interval":55},{"bytes":75,"dir":1,"interval":723},{"bytes":62,"dir":2,"interval":683},{"bytes":188,"dir":1,"interval":8},{"bytes":186,"dir":1,"interval":5},{"bytes":185,"dir":1,"interval":4},{"bytes":183,"dir":1,"interval":0},{"bytes":182,"dir":1,"interval":4},{"bytes":184,"dir":1,"interval":1},{"bytes":192,"dir":1,"interval":0},{"bytes":212,"dir":1,"interval":5},{"bytes":190,"dir":1,"interval":1},{"bytes":214,"dir":1,"interval":0},{"bytes":477,"dir":2,"interval":53},{"bytes":125,"dir":2,"interval":2},{"bytes":155,"dir":2,"interval":1},{"bytes":835,"dir":2,"interval":7},{"bytes":119,"dir":2,"interval":5},{"bytes":142,"dir":2,"interval":0},{"bytes":114,"dir":2,"interval":0},{"bytes":980,"dir":2,"interval":10},{"bytes":156,"dir":2,"interval":7},{"bytes":558,"dir":2,"interval":0},{"bytes":206,"dir":1,"interval":64},{"bytes":110,"dir":2,"interval":46},{"bytes":68,"dir":2,"interval":2},{"bytes":183,"dir":1,"interval":152},{"bytes":200,"dir":1,"interval":0},{"bytes":209,"dir":1,"interval":0},{"bytes":192,"dir":1,"interval":0},{"bytes":199,"dir":1,"interval":0},{"bytes":190,"dir":1,"interval":0},{"bytes":191,"dir":1,"interval":0},{"bytes":182,"dir":1,"interval":0},{"bytes":187,"dir":1,"interval":0},{"bytes":195,"dir":1,"interval":0},{"bytes":114,"dir":1,"interval":0},{"bytes":187,"dir":1,"interval":0},{"bytes":193,"dir":1,"interval":0},{"bytes":190,"dir":1,"interval":0},{"bytes":193,"dir":1,"interval":0},{"bytes":195,"dir":1,"interval":2},{"bytes":193,"dir":1,"interval":0},{"bytes":206,"dir":1,"interval":0},{"bytes":116,"dir":2,"interval":149},{"bytes":155,"dir":2,"interval":0},{"bytes":136,"dir":2,"interval":0},{"bytes":110,"dir":2,"interval":0},{"bytes":217,"dir":2,"interval":0},{"bytes":251,"dir":2,"interval":1},{"bytes":119,"dir":2,"interval":0},{"bytes":131,"dir":2,"interval":0},{"bytes":153,"dir":2,"interval":0},{"bytes":1262,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":488,"dir":2,"interval":0},{"bytes":129,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":32}],"tls":{"version":"tls1.2","sni":"cdnws.api.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":54289,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1628,"s2c_bytes":259549,"c2s_pkts":18,"s2c_pkts":182,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":42},{"bytes":43,"dir":2,"interval":30},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":8},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":140,"dir":1,"interval":0},{"bytes":73,"dir":1,"interval":0},{"bytes":71,"dir":1,"interval":0},{"bytes":71,"dir":1,"interval":0},{"bytes":71,"dir":1,"interval":0},{"bytes":73,"dir":1,"interval":0},{"bytes":75,"dir":1,"interval":0},{"bytes":72,"dir":1,"interval":0},{"bytes":73,"dir":1,"interval":0},{"bytes":88,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":6},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":62},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":32},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":190},{"bytes":1460,"dir":2,"interval":80},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":231},{"bytes":1460,"dir":2,"interval":219},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"livewebbs2.msstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54274,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1987,"s2c_bytes":197917,"c2s_pkts":8,"s2c_pkts":143,"total_pkts":151,"duration":10934,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":656,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":77},{"bytes":43,"dir":2,"interval":71},{"bytes":264,"dir":1,"interval":258},{"bytes":1460,"dir":2,"interval":261},{"bytes":1460,"dir":2,"interval":0},{"bytes":115,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1087,"dir":2,"interval":0},{"bytes":261,"dir":1,"interval":67},{"bytes":1460,"dir":2,"interval":69},{"bytes":1460,"dir":2,"interval":0},{"bytes":116,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":101},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1338,"dir":2,"interval":0},{"bytes":264,"dir":1,"interval":193},{"bytes":1460,"dir":2,"interval":83},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":43},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":346,"dir":2,"interval":0},{"bytes":266,"dir":1,"interval":154},{"bytes":1460,"dir":2,"interval":107},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":116,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":83},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":994,"dir":2,"interval":0},{"bytes":307,"dir":1,"interval":9508},{"bytes":23,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":9412},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":41,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"huyaimg.msstatic.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54238,"dip":"17.248.161.50","dport":443,"proto":"tcp","c2s_bytes":2146,"s2c_bytes":4954,"c2s_pkts":9,"s2c_pkts":6,"total_pkts":15,"duration":18848,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":588,"dir":2,"interval":0},{"bytes":754,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":174},{"bytes":120,"dir":2,"interval":106},{"bytes":53,"dir":1,"interval":120},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":851,"dir":1,"interval":0},{"bytes":471,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1918},{"bytes":31,"dir":1,"interval":16635}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54227,"dip":"17.248.161.137","dport":443,"proto":"tcp","c2s_bytes":1956,"s2c_bytes":8270,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":30912,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":989,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":139},{"bytes":51,"dir":2,"interval":79},{"bytes":1315,"dir":1,"interval":349},{"bytes":1102,"dir":2,"interval":512},{"bytes":31,"dir":1,"interval":30422}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54303,"dip":"122.14.43.165","dport":443,"proto":"tcp","c2s_bytes":2283,"s2c_bytes":217079,"c2s_pkts":24,"s2c_pkts":176,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":444},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":586},{"bytes":85,"dir":1,"interval":1370},{"bytes":43,"dir":2,"interval":334},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":371},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":157,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":375},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":201},{"bytes":1460,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":151},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":107},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":32},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":60},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":720},{"bytes":87,"dir":1,"interval":30},{"bytes":1460,"dir":2,"interval":150},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":188},{"bytes":1460,"dir":2,"interval":29},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":292,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":230},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":844,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":349},{"bytes":1460,"dir":2,"interval":351},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1189,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":292},{"bytes":1460,"dir":2,"interval":291},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1177,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":222},{"bytes":1460,"dir":2,"interval":220},{"bytes":1139,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":383,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":160},{"bytes":1139,"dir":2,"interval":160},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1012,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":214},{"bytes":1460,"dir":2,"interval":221},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":439,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":184},{"bytes":1460,"dir":2,"interval":175},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":698,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":216},{"bytes":1106,"dir":2,"interval":218},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":426,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":405},{"bytes":1460,"dir":2,"interval":405},{"bytes":1107,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":624,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":316},{"bytes":1460,"dir":2,"interval":316},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":262},{"bytes":1460,"dir":2,"interval":260},{"bytes":1142,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":278,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":319},{"bytes":1201,"dir":2,"interval":323},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":583,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":131},{"bytes":1460,"dir":2,"interval":126},{"bytes":1460,"dir":2,"interval":0},{"bytes":1364,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":364},{"bytes":1460,"dir":2,"interval":366},{"bytes":1129,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":135,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0},{"bytes":87,"dir":1,"interval":454},{"bytes":1460,"dir":2,"interval":452},{"bytes":1138,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":56,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cdnfile2.msstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54245,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":643,"s2c_bytes":5169,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":19397,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":376}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54323,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1170,"s2c_bytes":10701,"c2s_pkts":7,"s2c_pkts":12,"total_pkts":19,"duration":5603,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":316},{"bytes":43,"dir":2,"interval":314},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":356},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":417,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":352},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1127,"dir":2,"interval":0},{"bytes":30,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"huyaimg.msstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54316,"dip":"182.254.59.239","dport":443,"proto":"tcp","c2s_bytes":1324,"s2c_bytes":32873,"c2s_pkts":9,"s2c_pkts":30,"total_pkts":39,"duration":7481,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":938,"dir":2,"interval":388},{"bytes":93,"dir":1,"interval":628},{"bytes":51,"dir":2,"interval":240},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":224},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":373,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":79,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":222},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1244,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":309,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":879,"dir":2,"interval":75}],"tls":{"version":"tls1.2","sni":"a.msstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54318,"dip":"122.14.43.165","dport":443,"proto":"tcp","c2s_bytes":1095,"s2c_bytes":21763,"c2s_pkts":7,"s2c_pkts":19,"total_pkts":26,"duration":7311,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":276},{"bytes":43,"dir":2,"interval":271},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":182},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":342,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":184},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":539,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"static-jw.msstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54325,"dip":"106.52.143.153","dport":443,"proto":"tcp","c2s_bytes":2952,"s2c_bytes":336,"c2s_pkts":5,"s2c_pkts":2,"total_pkts":7,"duration":4931,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":221},{"bytes":619,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":325,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":222}],"tls":{"version":"tls1.2","sni":"metric.huya.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54322,"dip":"106.52.143.153","dport":443,"proto":"tcp","c2s_bytes":3165,"s2c_bytes":3752,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":6018,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":423,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":410},{"bytes":51,"dir":2,"interval":410},{"bytes":618,"dir":1,"interval":321},{"bytes":709,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":317},{"bytes":618,"dir":1,"interval":1071},{"bytes":577,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":1070}],"tls":{"version":"tls1.2","sni":"metric.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54313,"dip":"122.14.43.42","dport":443,"proto":"tcp","c2s_bytes":2096,"s2c_bytes":237708,"c2s_pkts":17,"s2c_pkts":171,"total_pkts":188,"duration":8632,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":388},{"bytes":43,"dir":2,"interval":384},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":114},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":346,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":114},{"bytes":1460,"dir":2,"interval":0},{"bytes":81,"dir":2,"interval":0},{"bytes":470,"dir":2,"interval":0},{"bytes":40,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":32},{"bytes":246,"dir":1,"interval":182},{"bytes":87,"dir":1,"interval":0},{"bytes":77,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":217},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1019,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":229},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":12},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":433},{"bytes":1460,"dir":2,"interval":175},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":409,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":154},{"bytes":1460,"dir":2,"interval":153},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":129,"dir":2,"interval":0},{"bytes":246,"dir":1,"interval":1525},{"bytes":79,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1526},{"bytes":1180,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":81,"dir":1,"interval":73},{"bytes":79,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":66},{"bytes":1460,"dir":2,"interval":202},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":99},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1456,"dir":2,"interval":0},{"bytes":34,"dir":1,"interval":308}],"tls":{"version":"tls1.2","sni":"hd.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54315,"dip":"122.14.43.171","dport":443,"proto":"tcp","c2s_bytes":1094,"s2c_bytes":28467,"c2s_pkts":7,"s2c_pkts":25,"total_pkts":32,"duration":7676,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":350},{"bytes":43,"dir":2,"interval":342},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":248},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":341,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":247},{"bytes":1460,"dir":2,"interval":4},{"bytes":26,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":249,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":218},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1128,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"kiwistatic.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54320,"dip":"119.23.229.206","dport":443,"proto":"tcp","c2s_bytes":1989,"s2c_bytes":3545,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":6239,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":344,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":296},{"bytes":51,"dir":2,"interval":292},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":414},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1196,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":413},{"bytes":123,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"ylog.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54288,"dip":"17.248.161.14","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":4835,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":19401,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":755,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":175}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54330,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":1033,"s2c_bytes":18470,"c2s_pkts":4,"s2c_pkts":15,"total_pkts":19,"duration":1421,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":613,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":1115},{"bytes":359,"dir":1,"interval":210},{"bytes":31,"dir":1,"interval":20},{"bytes":1460,"dir":2,"interval":477},{"bytes":111,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"anchorpost.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54331,"dip":"157.255.170.219","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":8972,"c2s_pkts":1,"s2c_pkts":8,"total_pkts":9,"duration":865,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":242,"dir":2,"interval":37},{"bytes":290,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"hyweb-test.oss-cn-shenzhen.aliyuncs.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54243,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1068,"s2c_bytes":5856,"c2s_pkts":5,"s2c_pkts":7,"total_pkts":12,"duration":30914,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":940,"dir":2,"interval":1},{"bytes":85,"dir":1,"interval":591},{"bytes":43,"dir":2,"interval":589},{"bytes":299,"dir":1,"interval":31},{"bytes":144,"dir":1,"interval":1},{"bytes":380,"dir":2,"interval":106},{"bytes":397,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30283}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54251,"dip":"180.163.26.100","dport":443,"proto":"tcp","c2s_bytes":1963,"s2c_bytes":4449,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":30341,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1332,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":42},{"bytes":51,"dir":2,"interval":33},{"bytes":533,"dir":1,"interval":31},{"bytes":756,"dir":1,"interval":0},{"bytes":186,"dir":2,"interval":36},{"bytes":31,"dir":1,"interval":30242}],"tls":{"version":"tls1.2","sni":"ios.bugly.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54282,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":3160,"s2c_bytes":261946,"c2s_pkts":11,"s2c_pkts":189,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":104},{"bytes":264,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":123},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":74},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":315,"dir":2,"interval":0},{"bytes":264,"dir":1,"interval":235},{"bytes":1460,"dir":2,"interval":123},{"bytes":1460,"dir":2,"interval":0},{"bytes":116,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":73},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":25,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":468},{"bytes":1460,"dir":2,"interval":417},{"bytes":1460,"dir":2,"interval":0},{"bytes":118,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":879,"dir":2,"interval":0},{"bytes":307,"dir":1,"interval":9040},{"bytes":1460,"dir":2,"interval":9009},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":273,"dir":1,"interval":938},{"bytes":1460,"dir":2,"interval":943},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":939,"dir":2,"interval":0},{"bytes":283,"dir":1,"interval":11430},{"bytes":1460,"dir":2,"interval":11441},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":801,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":3450},{"bytes":1460,"dir":2,"interval":3428},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":627,"dir":2,"interval":0},{"bytes":348,"dir":1,"interval":423},{"bytes":1460,"dir":2,"interval":426},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":181,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":3658},{"bytes":1460,"dir":2,"interval":3657},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"huyaimg.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54284,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1134,"s2c_bytes":94557,"c2s_pkts":5,"s2c_pkts":69,"total_pkts":74,"duration":31005,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":225},{"bytes":264,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":131},{"bytes":1460,"dir":2,"interval":0},{"bytes":116,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":62},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1305,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":483},{"bytes":1460,"dir":2,"interval":414},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":345,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1252,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":541,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30294}],"tls":{"version":"tls1.2","sni":"huyaimg.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54147,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":5599,"s2c_bytes":4703,"c2s_pkts":15,"s2c_pkts":15,"total_pkts":30,"duration":120179,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1024,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":28},{"bytes":51,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":15},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":285,"dir":1,"interval":0},{"bytes":63,"dir":1,"interval":0},{"bytes":63,"dir":1,"interval":0},{"bytes":63,"dir":1,"interval":0},{"bytes":1067,"dir":1,"interval":0},{"bytes":1067,"dir":1,"interval":0},{"bytes":1067,"dir":1,"interval":0},{"bytes":1067,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":14},{"bytes":81,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120119}],"tls":{"version":"tls1.2","sni":"btrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54152,"dip":"182.254.21.113","dport":443,"proto":"tcp","c2s_bytes":1240,"s2c_bytes":4445,"c2s_pkts":11,"s2c_pkts":11,"total_pkts":22,"duration":120179,"packets":[{"bytes":258,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1024,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":33},{"bytes":51,"dir":2,"interval":30},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":12},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":287,"dir":1,"interval":0},{"bytes":61,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":12},{"bytes":55,"dir":2,"interval":0},{"bytes":126,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":126,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120125}],"tls":{"version":"tls1.2","sni":"mtrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54309,"dip":"122.14.43.43","dport":443,"proto":"tcp","c2s_bytes":893,"s2c_bytes":8098,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":31365,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":656,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":377},{"bytes":43,"dir":2,"interval":370},{"bytes":268,"dir":1,"interval":385},{"bytes":1460,"dir":2,"interval":390},{"bytes":84,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":15,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30594}],"tls":{"version":"tls1.2","sni":"v-cms-img.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54337,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1688,"s2c_bytes":5702,"c2s_pkts":2,"s2c_pkts":8,"total_pkts":10,"duration":2423,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1171,"dir":1,"interval":2348},{"bytes":1460,"dir":2,"interval":244},{"bytes":571,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54184,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":1925,"s2c_bytes":4691,"c2s_pkts":9,"s2c_pkts":10,"total_pkts":19,"duration":121004,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":70},{"bytes":51,"dir":2,"interval":64},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":49},{"bytes":50,"dir":1,"interval":1},{"bytes":42,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":934,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":50},{"bytes":42,"dir":2,"interval":0},{"bytes":109,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120844}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54339,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1792,"s2c_bytes":55646,"c2s_pkts":2,"s2c_pkts":40,"total_pkts":42,"duration":2506,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1275,"dir":1,"interval":1796},{"bytes":1460,"dir":2,"interval":1388},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":940,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54343,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":3072,"s2c_bytes":4076,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":3630,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":431,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":880,"dir":1,"interval":3623},{"bytes":1452,"dir":1,"interval":0},{"bytes":223,"dir":1,"interval":0},{"bytes":436,"dir":2,"interval":1653},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54327,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":1636,"s2c_bytes":56150,"c2s_pkts":6,"s2c_pkts":43,"total_pkts":49,"duration":32935,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":384},{"bytes":351,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":385},{"bytes":1460,"dir":2,"interval":0},{"bytes":100,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":312},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":947},{"bytes":1460,"dir":2,"interval":634},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":988,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":336},{"bytes":1460,"dir":2,"interval":338},{"bytes":1460,"dir":2,"interval":0},{"bytes":100,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":690,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":31260}],"tls":{"version":"tls1.2","sni":"anchorpost.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54272,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":2731,"s2c_bytes":94577,"c2s_pkts":9,"s2c_pkts":70,"total_pkts":79,"duration":55774,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":641,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":85},{"bytes":43,"dir":2,"interval":79},{"bytes":351,"dir":1,"interval":254},{"bytes":1460,"dir":2,"interval":269},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":22285},{"bytes":1460,"dir":2,"interval":22280},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1433,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":1226},{"bytes":1460,"dir":2,"interval":1217},{"bytes":1460,"dir":2,"interval":0},{"bytes":104,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":722,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":225},{"bytes":1460,"dir":2,"interval":224},{"bytes":100,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":768,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":283},{"bytes":1460,"dir":2,"interval":293},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1131,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":211},{"bytes":1460,"dir":2,"interval":199},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":686,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":31191}],"tls":{"version":"tls1.2","sni":"anchorpost.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54344,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1778,"s2c_bytes":18549,"c2s_pkts":2,"s2c_pkts":16,"total_pkts":18,"duration":3016,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1261,"dir":1,"interval":2867},{"bytes":1460,"dir":2,"interval":532},{"bytes":228,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":2},{"bytes":646,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54268,"dip":"122.14.43.39","dport":443,"proto":"tcp","c2s_bytes":4129,"s2c_bytes":162751,"c2s_pkts":13,"s2c_pkts":123,"total_pkts":136,"duration":57623,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":641,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":77},{"bytes":43,"dir":2,"interval":71},{"bytes":351,"dir":1,"interval":258},{"bytes":1460,"dir":2,"interval":259},{"bytes":1460,"dir":2,"interval":0},{"bytes":99,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":493,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":1051},{"bytes":1460,"dir":2,"interval":1056},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":595,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":21237},{"bytes":1460,"dir":2,"interval":21236},{"bytes":100,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":78,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":909},{"bytes":1460,"dir":2,"interval":903},{"bytes":1460,"dir":2,"interval":0},{"bytes":100,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":931,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":309},{"bytes":1460,"dir":2,"interval":309},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":233},{"bytes":1460,"dir":2,"interval":233},{"bytes":100,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1199,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":426},{"bytes":1460,"dir":2,"interval":426},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1354,"dir":2,"interval":0},{"bytes":351,"dir":1,"interval":1368},{"bytes":1460,"dir":2,"interval":1363},{"bytes":100,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":101,"dir":2,"interval":0},{"bytes":348,"dir":1,"interval":426},{"bytes":1460,"dir":2,"interval":426},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1424,"dir":2,"interval":0},{"bytes":348,"dir":1,"interval":635},{"bytes":1460,"dir":2,"interval":634},{"bytes":100,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1129,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30634}],"tls":{"version":"tls1.2","sni":"anchorpost.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54348,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3606,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2368,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":828,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54247,"dip":"203.119.207.252","dport":443,"proto":"tcp","c2s_bytes":2901,"s2c_bytes":9524,"c2s_pkts":7,"s2c_pkts":12,"total_pkts":19,"duration":60695,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1370,"dir":2,"interval":0},{"bytes":162,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":593},{"bytes":51,"dir":2,"interval":590},{"bytes":73,"dir":2,"interval":3},{"bytes":560,"dir":1,"interval":32},{"bytes":1440,"dir":1,"interval":0},{"bytes":182,"dir":1,"interval":0},{"bytes":824,"dir":2,"interval":32},{"bytes":37,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":15},{"bytes":31,"dir":2,"interval":60000},{"bytes":31,"dir":1,"interval":60053}],"tls":{"version":"tls1.2","sni":"ulogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54326,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":3354,"s2c_bytes":6393,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":40862,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":9},{"bytes":126,"dir":1,"interval":530},{"bytes":51,"dir":2,"interval":9488},{"bytes":1448,"dir":1,"interval":9735},{"bytes":600,"dir":1,"interval":0},{"bytes":40,"dir":1,"interval":0},{"bytes":592,"dir":1,"interval":0},{"bytes":1173,"dir":2,"interval":598},{"bytes":31,"dir":1,"interval":30596}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54283,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":2657,"s2c_bytes":195838,"c2s_pkts":10,"s2c_pkts":141,"total_pkts":151,"duration":63779,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":133,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":84},{"bytes":264,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":86},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":96},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":17},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":128,"dir":2,"interval":0},{"bytes":261,"dir":1,"interval":208},{"bytes":1460,"dir":2,"interval":71},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":109},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1114,"dir":2,"interval":0},{"bytes":273,"dir":1,"interval":10391},{"bytes":1460,"dir":2,"interval":10281},{"bytes":116,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":823,"dir":2,"interval":0},{"bytes":348,"dir":1,"interval":11430},{"bytes":1460,"dir":2,"interval":11432},{"bytes":117,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":238,"dir":2,"interval":0},{"bytes":348,"dir":1,"interval":3873},{"bytes":1460,"dir":2,"interval":3870},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1128,"dir":2,"interval":0},{"bytes":307,"dir":1,"interval":4102},{"bytes":1460,"dir":2,"interval":4097},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":629,"dir":2,"interval":0},{"bytes":273,"dir":1,"interval":2753},{"bytes":1460,"dir":2,"interval":2758},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":152,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":30930}],"tls":{"version":"tls1.2","sni":"huyaimg.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54334,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":955,"s2c_bytes":34616,"c2s_pkts":4,"s2c_pkts":27,"total_pkts":31,"duration":32853,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":613,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":5},{"bytes":126,"dir":1,"interval":737},{"bytes":281,"dir":1,"interval":37},{"bytes":1460,"dir":2,"interval":168},{"bytes":124,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32076}],"tls":{"version":"tls1.2","sni":"huyaimg.msstatic.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54299,"dip":"119.23.229.206","dport":443,"proto":"tcp","c2s_bytes":14515,"s2c_bytes":4446,"c2s_pkts":20,"s2c_pkts":9,"total_pkts":29,"duration":57027,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":350,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":489},{"bytes":51,"dir":2,"interval":486},{"bytes":311,"dir":1,"interval":725},{"bytes":1227,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":728},{"bytes":397,"dir":1,"interval":5244},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":171},{"bytes":450,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":5420},{"bytes":397,"dir":1,"interval":5117},{"bytes":1287,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":5114},{"bytes":397,"dir":1,"interval":8914},{"bytes":1440,"dir":1,"interval":0},{"bytes":545,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":8915},{"bytes":397,"dir":1,"interval":5803},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":50,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":5804},{"bytes":31,"dir":1,"interval":30516}],"tls":{"version":"tls1.2","sni":"ylog.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54354,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":5177,"s2c_bytes":4062,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":7149,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":1260,"dir":2,"interval":0},{"bytes":816,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":875,"dir":1,"interval":3915},{"bytes":1452,"dir":1,"interval":3225},{"bytes":881,"dir":1,"interval":3},{"bytes":1452,"dir":1,"interval":-10},{"bytes":437,"dir":2,"interval":5207},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54351,"dip":"182.18.17.20","dport":443,"proto":"tcp","c2s_bytes":1377,"s2c_bytes":28468,"c2s_pkts":4,"s2c_pkts":24,"total_pkts":28,"duration":12691,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":558,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":3},{"bytes":271,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":124},{"bytes":58,"dir":1,"interval":68},{"bytes":279,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":176},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":478,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":12483}],"tls":{"version":"tls1.2","sni":"img.ljcdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54347,"dip":"182.18.17.20","dport":443,"proto":"tcp","c2s_bytes":1925,"s2c_bytes":36107,"c2s_pkts":5,"s2c_pkts":29,"total_pkts":34,"duration":15102,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":573,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":4},{"bytes":271,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":651},{"bytes":327,"dir":1,"interval":1754},{"bytes":1448,"dir":2,"interval":2071},{"bytes":1448,"dir":2,"interval":0},{"bytes":1304,"dir":2,"interval":0},{"bytes":279,"dir":1,"interval":193},{"bytes":1448,"dir":2,"interval":176},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1249,"dir":2,"interval":0},{"bytes":279,"dir":1,"interval":165},{"bytes":1448,"dir":2,"interval":171},{"bytes":1448,"dir":2,"interval":1},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":559,"dir":2,"interval":0},{"bytes":24,"dir":2,"interval":12319}],"tls":{"version":"tls1.2","sni":"img.ljcdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54338,"dip":"123.125.106.226","dport":443,"proto":"tcp","c2s_bytes":1189,"s2c_bytes":6261,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":32262,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1178,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":4},{"bytes":357,"dir":1,"interval":1342},{"bytes":315,"dir":1,"interval":0},{"bytes":421,"dir":2,"interval":165}],"tls":{"version":"tls1.2","sni":"api.weibo.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54098,"dip":"122.14.43.168","dport":443,"proto":"tcp","c2s_bytes":1394,"s2c_bytes":51107,"c2s_pkts":9,"s2c_pkts":43,"total_pkts":52,"duration":219910,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":70},{"bytes":53,"dir":1,"interval":5},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":247,"dir":1,"interval":0},{"bytes":159,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":15},{"bytes":1460,"dir":2,"interval":60},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1449,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1076,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1441,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":162,"dir":1,"interval":30028},{"bytes":1460,"dir":2,"interval":29968},{"bytes":1145,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":969,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"i10.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54220,"dip":"203.208.50.167","dport":443,"proto":"tcp","c2s_bytes":1242,"s2c_bytes":5461,"c2s_pkts":9,"s2c_pkts":7,"total_pkts":16,"duration":121046,"packets":[{"bytes":596,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1018,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":86},{"bytes":46,"dir":1,"interval":3},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":364,"dir":1,"interval":0},{"bytes":564,"dir":2,"interval":73},{"bytes":31,"dir":2,"interval":2},{"bytes":332,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":40},{"bytes":620,"dir":2,"interval":37},{"bytes":39,"dir":1,"interval":49},{"bytes":24,"dir":1,"interval":120861}],"tls":{"version":"tls1.2","sni":"safebrowsing.googleapis.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":54358,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1691,"s2c_bytes":17000,"c2s_pkts":2,"s2c_pkts":15,"total_pkts":17,"duration":2643,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":1174,"dir":1,"interval":2284},{"bytes":1460,"dir":2,"interval":1115},{"bytes":228,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":929,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":557,"dir":2,"interval":5}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54357,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":4714,"s2c_bytes":4063,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":6482,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":416,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":880,"dir":1,"interval":6471},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":1269,"dir":1,"interval":0},{"bytes":438,"dir":2,"interval":4125},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54359,"dip":"211.159.232.243","dport":443,"proto":"tcp","c2s_bytes":1682,"s2c_bytes":10047,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":2398,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":428,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":1165,"dir":1,"interval":2160},{"bytes":1460,"dir":2,"interval":505},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"app.api.lianjia.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54460,"dip":"211.159.232.241","dport":443,"proto":"tcp","c2s_bytes":5174,"s2c_bytes":4061,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":2503,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":1400,"dir":2,"interval":0},{"bytes":536,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":880,"dir":1,"interval":2494},{"bytes":1452,"dir":1,"interval":0},{"bytes":596,"dir":1,"interval":0},{"bytes":1452,"dir":1,"interval":0},{"bytes":277,"dir":1,"interval":0},{"bytes":436,"dir":2,"interval":297},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.lianjia.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54352,"dip":"182.18.17.24","dport":443,"proto":"tcp","c2s_bytes":1628,"s2c_bytes":11024,"c2s_pkts":5,"s2c_pkts":10,"total_pkts":15,"duration":33817,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":558,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":4},{"bytes":271,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":124},{"bytes":58,"dir":1,"interval":68},{"bytes":265,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":219},{"bytes":1282,"dir":2,"interval":0},{"bytes":265,"dir":1,"interval":30618},{"bytes":1448,"dir":2,"interval":30578},{"bytes":1448,"dir":2,"interval":0},{"bytes":1402,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"img.ljcdn.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54461,"dip":"182.18.17.20","dport":443,"proto":"tcp","c2s_bytes":1394,"s2c_bytes":4011,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":2594,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":573,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":4},{"bytes":271,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":606},{"bytes":354,"dir":1,"interval":1590}],"tls":{"version":"tls1.2","sni":"image1.ljcdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54466,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":12167,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54355,"dip":"122.14.43.167","dport":443,"proto":"tcp","c2s_bytes":989,"s2c_bytes":11356,"c2s_pkts":4,"s2c_pkts":11,"total_pkts":15,"duration":33000,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":628,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":447},{"bytes":315,"dir":1,"interval":370},{"bytes":1460,"dir":2,"interval":446},{"bytes":124,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":32042}],"tls":{"version":"tls1.2","sni":"huyaimg.msstatic.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54474,"dip":"58.250.137.87","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":3274,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"ipv4.gdt.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54473,"dip":"182.254.56.83","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":3275,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"wspeed.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54472,"dip":"182.254.51.22","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":3275,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"yun-hl.3g.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54470,"dip":"17.248.161.134","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":5396,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"p46-bookmarks.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54332,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":1111,"s2c_bytes":18104,"c2s_pkts":9,"s2c_pkts":19,"total_pkts":28,"duration":80936,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":622,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":12},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":896},{"bytes":53,"dir":1,"interval":134},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":162,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":400},{"bytes":1460,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1259,"dir":2,"interval":0},{"bytes":257,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":145},{"bytes":92,"dir":1,"interval":1632},{"bytes":1460,"dir":2,"interval":1775},{"bytes":1125,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1276,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":78128}],"tls":{"version":"tls1.2","sni":"cdnfile1.msstatic.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54464,"dip":"47.101.181.69","dport":443,"proto":"tcp","c2s_bytes":2202,"s2c_bytes":3725,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":17532,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":322,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":28},{"bytes":126,"dir":1,"interval":592},{"bytes":397,"dir":1,"interval":84},{"bytes":1131,"dir":1,"interval":0},{"bytes":225,"dir":2,"interval":292},{"bytes":31,"dir":1,"interval":16856}],"tls":{"version":"tls1.2","sni":"ylog.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54335,"dip":"182.254.53.181","dport":443,"proto":"tcp","c2s_bytes":1123,"s2c_bytes":80386,"c2s_pkts":9,"s2c_pkts":61,"total_pkts":70,"duration":76517,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":910,"dir":2,"interval":4},{"bytes":274,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":275},{"bytes":53,"dir":1,"interval":112},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":224,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":215},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":233,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":84,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":58},{"bytes":42,"dir":1,"interval":285},{"bytes":1460,"dir":2,"interval":329},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":222,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":75785}],"tls":{"version":"tls1.2","sni":"cdnfile.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54246,"dip":"118.25.86.71","dport":443,"proto":"tcp","c2s_bytes":1114,"s2c_bytes":6615,"c2s_pkts":9,"s2c_pkts":9,"total_pkts":18,"duration":121445,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":1272,"dir":2,"interval":0},{"bytes":1412,"dir":2,"interval":0},{"bytes":748,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":591},{"bytes":51,"dir":2,"interval":590},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":38},{"bytes":50,"dir":1,"interval":1},{"bytes":42,"dir":1,"interval":0},{"bytes":170,"dir":1,"interval":0},{"bytes":120,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":38},{"bytes":188,"dir":2,"interval":17},{"bytes":31,"dir":1,"interval":120780}],"tls":{"version":"tls1.2","sni":"ffilelogapp.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54242,"dip":"106.52.143.153","dport":443,"proto":"tcp","c2s_bytes":256090,"s2c_bytes":4649,"c2s_pkts":189,"s2c_pkts":11,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":423,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":755},{"bytes":51,"dir":2,"interval":748},{"bytes":285,"dir":1,"interval":46},{"bytes":1193,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":47},{"bytes":286,"dir":1,"interval":3157},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":48},{"bytes":1440,"dir":1,"interval":432},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1004,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":3753},{"bytes":373,"dir":1,"interval":20038},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":213},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":10},{"bytes":1440,"dir":1,"interval":289},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":316},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":7},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":184},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":311},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":208},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":415},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":65},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":33},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":170},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":187},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":26},{"bytes":1440,"dir":1,"interval":0},{"bytes":1331,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":22393},{"bytes":372,"dir":1,"interval":17158},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":246},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":14},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":138},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":23},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":43},{"bytes":1440,"dir":1,"interval":3},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":53},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":29},{"bytes":1440,"dir":1,"interval":439},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1311,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":18441},{"bytes":372,"dir":1,"interval":18962},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":47},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":64},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":146,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":18786},{"bytes":371,"dir":1,"interval":19857},{"bytes":1440,"dir":1,"interval":7},{"bytes":608,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":229,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":19862},{"bytes":371,"dir":1,"interval":20019},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":584,"dir":1,"interval":0},{"bytes":185,"dir":2,"interval":20023},{"bytes":371,"dir":1,"interval":20086},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"statwup.huya.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54481,"dip":"17.248.161.68","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":6664,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":20308,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":600,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":872,"dir":2,"interval":8},{"bytes":93,"dir":1,"interval":787}],"tls":{"version":"tls1.2","sni":"p46-bookmarks.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54480,"dip":"182.254.51.22","dport":443,"proto":"tcp","c2s_bytes":1302,"s2c_bytes":4584,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":20281,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":713,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":161},{"bytes":43,"dir":2,"interval":158},{"bytes":419,"dir":1,"interval":97},{"bytes":225,"dir":1,"interval":0},{"bytes":1109,"dir":2,"interval":102},{"bytes":23,"dir":2,"interval":20000},{"bytes":23,"dir":1,"interval":20021}],"tls":{"version":"tls1.2","sni":"yun-hl.3g.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54290,"dip":"122.14.43.42","dport":443,"proto":"tcp","c2s_bytes":1050,"s2c_bytes":7215,"c2s_pkts":8,"s2c_pkts":12,"total_pkts":20,"duration":122121,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":552},{"bytes":1460,"dir":2,"interval":0},{"bytes":650,"dir":2,"interval":317},{"bytes":85,"dir":1,"interval":1258},{"bytes":43,"dir":2,"interval":384},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":579},{"bytes":42,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":274,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":30,"dir":2,"interval":579},{"bytes":1460,"dir":2,"interval":59},{"bytes":490,"dir":2,"interval":0},{"bytes":40,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":120000},{"bytes":23,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":120283}],"tls":{"version":"tls1.2","sni":"hd.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54475,"dip":"58.250.137.87","dport":443,"proto":"tcp","c2s_bytes":912,"s2c_bytes":4482,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31360,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1281,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":161},{"bytes":51,"dir":2,"interval":154},{"bytes":238,"dir":1,"interval":97},{"bytes":270,"dir":2,"interval":99},{"bytes":31,"dir":1,"interval":31060}],"tls":{"version":"tls1.2","sni":"ipv4.gdt.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54483,"dip":"182.254.52.102","dport":443,"proto":"tcp","c2s_bytes":944,"s2c_bytes":4673,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":32420,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1289,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":44},{"bytes":51,"dir":2,"interval":41},{"bytes":270,"dir":1,"interval":80},{"bytes":413,"dir":2,"interval":81},{"bytes":31,"dir":1,"interval":32288}],"tls":{"version":"tls1.2","sni":"3gimg.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54484,"dip":"182.254.52.102","dport":443,"proto":"tcp","c2s_bytes":869,"s2c_bytes":550,"c2s_pkts":4,"s2c_pkts":2,"total_pkts":6,"duration":32132,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":20},{"bytes":270,"dir":1,"interval":0},{"bytes":413,"dir":2,"interval":27},{"bytes":31,"dir":1,"interval":32102}],"tls":{"version":"tls1.2","sni":"3gimg.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54506,"dip":"17.248.161.7","dport":443,"proto":"tcp","c2s_bytes":341,"s2c_bytes":6664,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":21708,"packets":[{"bytes":248,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":8},{"bytes":600,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":872,"dir":2,"interval":8},{"bytes":93,"dir":1,"interval":1421}],"tls":{"version":"tls1.2","sni":"p46-bookmarks.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54507,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":2407,"s2c_bytes":394,"c2s_pkts":4,"s2c_pkts":3,"total_pkts":7,"duration":20743,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":152,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":81},{"bytes":487,"dir":1,"interval":1},{"bytes":1352,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":88},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54489,"dip":"182.254.21.113","dport":443,"proto":"tcp","c2s_bytes":2178,"s2c_bytes":4215,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":41740,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1024,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":62},{"bytes":51,"dir":2,"interval":59},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":423},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":285,"dir":1,"interval":0},{"bytes":1067,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":424},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"btrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54219,"dip":"101.226.233.189","dport":443,"proto":"tcp","c2s_bytes":1649,"s2c_bytes":4789,"c2s_pkts":10,"s2c_pkts":12,"total_pkts":22,"duration":201889,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1211,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":86},{"bytes":51,"dir":2,"interval":79},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":37},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":544,"dir":1,"interval":0},{"bytes":101,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":36},{"bytes":42,"dir":2,"interval":0},{"bytes":190,"dir":2,"interval":4},{"bytes":38,"dir":2,"interval":0},{"bytes":111,"dir":1,"interval":29905},{"bytes":67,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":29901},{"bytes":190,"dir":2,"interval":4},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"voreader.reader.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54510,"dip":"17.248.161.7","dport":443,"proto":"tcp","c2s_bytes":180,"s2c_bytes":7,"c2s_pkts":1,"s2c_pkts":1,"total_pkts":2,"duration":586,"packets":[{"bytes":180,"dir":1,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"p46-bookmarks.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54479,"dip":"182.254.56.83","dport":443,"proto":"tcp","c2s_bytes":1809,"s2c_bytes":4830,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":45872,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":248,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":140},{"bytes":51,"dir":2,"interval":137},{"bytes":73,"dir":2,"interval":0},{"bytes":428,"dir":1,"interval":23},{"bytes":631,"dir":1,"interval":0},{"bytes":107,"dir":2,"interval":25},{"bytes":45,"dir":1,"interval":95},{"bytes":31,"dir":2,"interval":45000},{"bytes":31,"dir":1,"interval":45613},{"bytes":31,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"wspeed.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54513,"dip":"125.39.133.26","dport":443,"proto":"tcp","c2s_bytes":1141,"s2c_bytes":4622,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":3276,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":220,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":174},{"bytes":51,"dir":2,"interval":170},{"bytes":298,"dir":1,"interval":29},{"bytes":169,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":3066},{"bytes":31,"dir":2,"interval":3095}],"tls":{"version":"tls1.2","sni":"ssl.ts7.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54509,"dip":"180.163.25.229","dport":443,"proto":"tcp","c2s_bytes":1183,"s2c_bytes":6242,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":23848,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":583,"dir":2,"interval":653},{"bytes":118,"dir":1,"interval":2549},{"bytes":43,"dir":2,"interval":1896},{"bytes":320,"dir":1,"interval":400},{"bytes":205,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":453},{"bytes":137,"dir":2,"interval":0},{"bytes":23,"dir":2,"interval":20009},{"bytes":23,"dir":1,"interval":20899}],"tls":{"version":"tls1.2","sni":"configsvr.msf.3g.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54511,"dip":"17.248.161.7","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":6664,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":19469,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":9},{"bytes":600,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":872,"dir":2,"interval":9},{"bytes":93,"dir":1,"interval":580}],"tls":{"version":"tls1.2","sni":"p46-bookmarks.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54512,"dip":"113.96.237.160","dport":443,"proto":"tcp","c2s_bytes":1465,"s2c_bytes":4684,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":30638,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1297,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":186},{"bytes":51,"dir":2,"interval":180},{"bytes":382,"dir":1,"interval":126},{"bytes":409,"dir":1,"interval":0},{"bytes":456,"dir":2,"interval":134},{"bytes":31,"dir":1,"interval":30285}],"tls":{"version":"tls1.2","sni":"ios.rqd.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54517,"dip":"17.248.161.69","dport":443,"proto":"tcp","c2s_bytes":180,"s2c_bytes":7,"c2s_pkts":1,"s2c_pkts":1,"total_pkts":2,"duration":417,"packets":[{"bytes":180,"dir":1,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"p46-bookmarks.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54515,"dip":"17.248.161.69","dport":443,"proto":"tcp","c2s_bytes":341,"s2c_bytes":6664,"c2s_pkts":2,"s2c_pkts":7,"total_pkts":9,"duration":22313,"packets":[{"bytes":248,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":7},{"bytes":600,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":872,"dir":2,"interval":8},{"bytes":93,"dir":1,"interval":600}],"tls":{"version":"tls1.2","sni":"p46-bookmarks.icloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54514,"dip":"182.254.50.14","dport":443,"proto":"tcp","c2s_bytes":1486,"s2c_bytes":4661,"c2s_pkts":5,"s2c_pkts":5,"total_pkts":10,"duration":32766,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1425,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":109},{"bytes":51,"dir":2,"interval":101},{"bytes":327,"dir":1,"interval":115},{"bytes":485,"dir":1,"interval":0},{"bytes":305,"dir":2,"interval":118},{"bytes":31,"dir":1,"interval":32528}],"tls":{"version":"tls1.2","sni":"ssl.log.wtlogin.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54336,"dip":"157.255.77.128","dport":443,"proto":"tcp","c2s_bytes":443,"s2c_bytes":4209,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":113670,"packets":[{"bytes":317,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":1},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":37},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2191},{"bytes":31,"dir":2,"interval":20951}],"tls":{"version":"tls1.2","sni":"","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c011","c007","c00c","c002","0005","0004","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":54339,"dip":"182.61.200.236","dport":443,"proto":"tcp","c2s_bytes":443,"s2c_bytes":4209,"c2s_pkts":2,"s2c_pkts":10,"total_pkts":12,"duration":111285,"packets":[{"bytes":317,"dir":1,"interval":0},{"bytes":58,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":683,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":2},{"bytes":9,"dir":2,"interval":0},{"bytes":119,"dir":2,"interval":3},{"bytes":6,"dir":2,"interval":0},{"bytes":45,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":2414},{"bytes":31,"dir":2,"interval":18013}],"tls":{"version":"tls1.2","sni":"","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","009d","003d","0035","0084","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","009a","0099","0098","0097","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004","009c","003c","002f","0096","0041","0007","c011","c007","c00c","c002","0005","0004","c012","c008","0016","0013","0010","000d","c00d","c003","000a"],"extensions_list":[11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":54516,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":1120,"s2c_bytes":925,"c2s_pkts":5,"s2c_pkts":3,"total_pkts":8,"duration":31259,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":148,"dir":2,"interval":0},{"bytes":43,"dir":1,"interval":111},{"bytes":385,"dir":1,"interval":7},{"bytes":152,"dir":1,"interval":1},{"bytes":380,"dir":2,"interval":196},{"bytes":397,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":31139}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54275,"dip":"47.101.30.175","dport":443,"proto":"tcp","c2s_bytes":2146,"s2c_bytes":6736,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":207479,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":712,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":334},{"bytes":51,"dir":2,"interval":332},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":88},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":464,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":98},{"bytes":108,"dir":2,"interval":28},{"bytes":415,"dir":1,"interval":10486},{"bytes":107,"dir":2,"interval":10480},{"bytes":474,"dir":1,"interval":21793},{"bytes":107,"dir":2,"interval":21790}],"tls":{"version":"tls1.2","sni":"e-stat.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54276,"dip":"47.101.30.175","dport":443,"proto":"tcp","c2s_bytes":6469,"s2c_bytes":7397,"c2s_pkts":17,"s2c_pkts":19,"total_pkts":36,"duration":207479,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1200,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1},{"bytes":712,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":334},{"bytes":51,"dir":2,"interval":331},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":89},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":154,"dir":1,"interval":0},{"bytes":922,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":98},{"bytes":42,"dir":2,"interval":0},{"bytes":108,"dir":2,"interval":31},{"bytes":576,"dir":1,"interval":1480},{"bytes":107,"dir":2,"interval":1471},{"bytes":489,"dir":1,"interval":6011},{"bytes":107,"dir":2,"interval":6010},{"bytes":63,"dir":1,"interval":2994},{"bytes":922,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":2963},{"bytes":107,"dir":2,"interval":30},{"bytes":508,"dir":1,"interval":857},{"bytes":107,"dir":2,"interval":862},{"bytes":547,"dir":1,"interval":10332},{"bytes":107,"dir":2,"interval":10329},{"bytes":64,"dir":1,"interval":10604},{"bytes":922,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":10571},{"bytes":107,"dir":2,"interval":28},{"bytes":509,"dir":1,"interval":650},{"bytes":107,"dir":2,"interval":652}],"tls":{"version":"tls1.2","sni":"e-stat.huya.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54520,"dip":"17.248.161.14","dport":443,"proto":"tcp","c2s_bytes":2597,"s2c_bytes":4992,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":6770,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":754,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":1359},{"bytes":120,"dir":2,"interval":5742},{"bytes":53,"dir":1,"interval":4573},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":184},{"bytes":1448,"dir":1,"interval":831},{"bytes":394,"dir":1,"interval":7}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54523,"dip":"17.248.161.140","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1038,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":67}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54524,"dip":"17.248.161.140","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3665,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1678,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1306,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":80}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54525,"dip":"35.227.252.169","dport":443,"proto":"tcp","c2s_bytes":232,"s2c_bytes":3600,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":243,"packets":[{"bytes":232,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1215,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":65}],"tls":{"version":"tls1.2","sni":"stats.appsflyer.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013"],"extensions_list":[65281,0,23,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54505,"dip":"111.13.231.167","dport":443,"proto":"tcp","c2s_bytes":1008,"s2c_bytes":5522,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":120898,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":354,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":403},{"bytes":51,"dir":2,"interval":398},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":297},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":151,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":297},{"bytes":630,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120191}],"tls":{"version":"tls1.2","sni":"imgcache.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54529,"dip":"17.248.161.140","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3339,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":18315,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54528,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":19706,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54539,"dip":"182.254.56.83","dport":443,"proto":"tcp","c2s_bytes":1463,"s2c_bytes":4902,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":31043,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":220,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":73,"dir":2,"interval":0},{"bytes":323,"dir":1,"interval":1036},{"bytes":623,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30286}],"tls":{"version":"tls1.2","sni":"wspeed.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54540,"dip":"125.39.133.26","dport":443,"proto":"tcp","c2s_bytes":1015,"s2c_bytes":5254,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":30311,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":192,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":298,"dir":1,"interval":146},{"bytes":169,"dir":1,"interval":0},{"bytes":484,"dir":2,"interval":100},{"bytes":31,"dir":1,"interval":30160}],"tls":{"version":"tls1.2","sni":"ssl.ts8.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54541,"dip":"182.254.50.14","dport":443,"proto":"tcp","c2s_bytes":1360,"s2c_bytes":4856,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":31132,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1397,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":5},{"bytes":327,"dir":1,"interval":135},{"bytes":485,"dir":1,"interval":0},{"bytes":305,"dir":2,"interval":142},{"bytes":31,"dir":1,"interval":30993}],"tls":{"version":"tls1.2","sni":"ssl.log.wtlogin.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54552,"dip":"125.39.133.26","dport":443,"proto":"tcp","c2s_bytes":983,"s2c_bytes":4801,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":3923,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":192,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":298,"dir":1,"interval":915},{"bytes":137,"dir":1,"interval":1},{"bytes":31,"dir":1,"interval":3001},{"bytes":31,"dir":2,"interval":3842}],"tls":{"version":"tls1.2","sni":"ssl.ts9.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54542,"dip":"182.254.56.83","dport":443,"proto":"tcp","c2s_bytes":1494,"s2c_bytes":4938,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":32042,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":205,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":323,"dir":1,"interval":760},{"bytes":623,"dir":1,"interval":0},{"bytes":155,"dir":2,"interval":74},{"bytes":31,"dir":1,"interval":31276}],"tls":{"version":"tls1.2","sni":"wspeed.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54578,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":68,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54579,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1157,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54584,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1132,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54585,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":4208,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54597,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":15,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54598,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1340,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54588,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1493,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54604,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":4047,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54608,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1429,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54612,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":884,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54613,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2508,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54618,"dip":"182.254.57.52","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1872,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.57.52","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54621,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":250,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":34},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54623,"dip":"182.254.57.52","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1574,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.57.52","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54614,"dip":"182.254.52.198","dport":443,"proto":"tcp","c2s_bytes":811,"s2c_bytes":221758,"c2s_pkts":2,"s2c_pkts":155,"total_pkts":157,"duration":6754,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1060,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":6},{"bytes":294,"dir":1,"interval":4227},{"bytes":549,"dir":2,"interval":300},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1219,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"d.url.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54632,"dip":"182.254.57.52","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":975,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":6},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":9}],"tls":{"version":"tls1.2","sni":"182.254.57.52","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54577,"dip":"182.254.56.83","dport":443,"proto":"tcp","c2s_bytes":1534,"s2c_bytes":4902,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":31358,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":220,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":73,"dir":2,"interval":0},{"bytes":323,"dir":1,"interval":1351},{"bytes":694,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30047}],"tls":{"version":"tls1.2","sni":"wspeed.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54635,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1418,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54636,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1419,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54634,"dip":"182.254.56.61","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1981,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.56.61","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54637,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":29,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54647,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1574,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54645,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1629,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54644,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1629,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54646,"dip":"182.254.56.61","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1581,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"182.254.56.61","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54642,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2653,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54650,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":358,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54648,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2319,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54649,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2749,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54652,"dip":"182.254.56.61","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":3943,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.56.61","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54656,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1074,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54659,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1052,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54663,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1055,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54655,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1097,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54675,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":731,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54674,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2069,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54673,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2069,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54671,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2499,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54679,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":861,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54684,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1106,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54687,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":28,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54683,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2289,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54693,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":18,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":-1},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54688,"dip":"182.254.57.52","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2292,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.57.52","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54682,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":3423,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54697,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1401,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54694,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2083,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54698,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1334,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54705,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":947,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54707,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2548,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54710,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2465,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54686,"dip":"182.254.57.52","dport":443,"proto":"tcp","c2s_bytes":964,"s2c_bytes":167791,"c2s_pkts":2,"s2c_pkts":119,"total_pkts":121,"duration":8368,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":131,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7},{"bytes":447,"dir":1,"interval":3304},{"bytes":1440,"dir":2,"interval":1444},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":4},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":3},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":399,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":2},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":1},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1363,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gchat.qpic.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54711,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":58,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54712,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4099,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54726,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":5071,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54729,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":63,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54716,"dip":"182.254.76.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1043,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":34},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.76.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54714,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":6097,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54718,"dip":"182.254.56.61","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":1044,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":6}],"tls":{"version":"tls1.2","sni":"182.254.56.61","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54739,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1537,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54738,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1574,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54700,"dip":"59.83.218.25","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4432,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":15283,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1246,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":29}],"tls":{"version":"tls1.2","sni":"100d2cc2eab9f4c0bd7332523ab40a78.dd.cdntips.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54742,"dip":"182.254.76.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2041,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":30},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.76.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54727,"dip":"182.254.51.22","dport":443,"proto":"tcp","c2s_bytes":1444,"s2c_bytes":3800,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":3664,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":661,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":927,"dir":1,"interval":2547},{"bytes":145,"dir":2,"interval":1555}],"tls":{"version":"tls1.2","sni":"up-hl.3g.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54743,"dip":"182.254.56.61","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3022,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":20,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.56.61","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54745,"dip":"182.254.59.170","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1086,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.59.170","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54746,"dip":"182.254.52.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1348,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.52.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54749,"dip":"182.254.59.170","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1326,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.59.170","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54744,"dip":"182.254.57.52","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":2441,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"182.254.57.52","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54748,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1388,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54736,"dip":"121.51.177.52","dport":443,"proto":"tcp","c2s_bytes":811,"s2c_bytes":221758,"c2s_pkts":2,"s2c_pkts":154,"total_pkts":156,"duration":5458,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1036,"dir":2,"interval":0},{"bytes":282,"dir":2,"interval":42},{"bytes":294,"dir":1,"interval":4490},{"bytes":549,"dir":2,"interval":1334},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":38},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":37},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":34},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1277,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1074,"dir":2,"interval":39}],"tls":{"version":"tls1.2","sni":"d.url.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54640,"dip":"182.254.56.83","dport":443,"proto":"tcp","c2s_bytes":1565,"s2c_bytes":4938,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":35430,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":205,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":323,"dir":1,"interval":2932},{"bytes":694,"dir":1,"interval":1},{"bytes":155,"dir":2,"interval":1342},{"bytes":31,"dir":1,"interval":32491}],"tls":{"version":"tls1.2","sni":"wspeed.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54747,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2048,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54750,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":747,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54755,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2542,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54751,"dip":"182.254.59.170","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2548,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.59.170","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54680,"dip":"182.254.59.170","dport":443,"proto":"tcp","c2s_bytes":1241,"s2c_bytes":5889,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":29712,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":17,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7},{"bytes":362,"dir":1,"interval":2574},{"bytes":597,"dir":2,"interval":1646},{"bytes":362,"dir":1,"interval":25534},{"bytes":597,"dir":2,"interval":25527}],"tls":{"version":"tls1.2","sni":"d3g.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54759,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2212,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54752,"dip":"182.254.52.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":5491,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.52.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54753,"dip":"182.254.57.52","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3022,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":39,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.57.52","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54758,"dip":"182.254.76.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":3930,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.76.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54764,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1975,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54766,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1070,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54765,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3129,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54772,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":3040,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54776,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1030,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54774,"dip":"182.254.76.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":3073,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":35},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.76.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54785,"dip":"182.254.59.172","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":529,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"182.254.59.172","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54786,"dip":"182.254.59.172","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":298,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.59.172","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54782,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1944,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54784,"dip":"182.254.76.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1907,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.76.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54780,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2483,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54789,"dip":"182.254.59.172","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":636,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"182.254.59.172","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54763,"dip":"182.254.56.61","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":8597,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.56.61","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54793,"dip":"182.254.76.104","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":736,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":33},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.76.104","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54787,"dip":"182.254.49.111","dport":443,"proto":"tcp","c2s_bytes":620,"s2c_bytes":4694,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":2227,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1409,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1137},{"bytes":50,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":106}],"tls":{"version":"tls1.2","sni":"hbd.url.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54781,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":7088,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54795,"dip":"182.254.52.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":4754,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.52.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54797,"dip":"182.254.56.61","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3320,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":4069,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":142,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"182.254.56.61","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54779,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3804,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":7100,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54799,"dip":"61.183.164.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4103,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.14","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54806,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":19,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54796,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3078,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54801,"dip":"182.254.59.170","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3083,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.59.170","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54810,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1689,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54811,"dip":"182.254.59.170","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1688,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"182.254.59.170","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54812,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2460,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54814,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1177,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54808,"dip":"182.254.52.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":3663,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.52.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54815,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1436,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54818,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1079,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54817,"dip":"182.254.52.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1110,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.52.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54822,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":879,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54823,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1314,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54819,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4004,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54821,"dip":"182.254.52.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4706,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":4026,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.52.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54824,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":984,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":11},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54828,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":642,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54829,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1346,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54825,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3259,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54826,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":5301,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.229","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54832,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2045,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54835,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":4525,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54845,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":831,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54841,"dip":"182.254.59.172","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":150,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"182.254.59.172","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54849,"dip":"182.254.59.172","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":134,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.59.172","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54850,"dip":"182.254.59.172","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4691,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":218,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7}],"tls":{"version":"tls1.2","sni":"182.254.59.172","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54804,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":18931,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54834,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":6122,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54853,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":221,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54854,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":252,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54848,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1926,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54852,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2954,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54857,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":649,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54840,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1750,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54855,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":440,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":26},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54761,"dip":"123.157.255.155","dport":443,"proto":"tcp","c2s_bytes":975,"s2c_bytes":145575,"c2s_pkts":3,"s2c_pkts":102,"total_pkts":105,"duration":36260,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1222,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":31},{"bytes":427,"dir":1,"interval":2429},{"bytes":1460,"dir":2,"interval":756},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":26},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":19},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":630,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":33799}],"tls":{"version":"tls1.2","sni":"988ca3a8625c7062fe81eba2e6fafa65.dd.cdntips.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54856,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1845,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54859,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1575,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54864,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":918,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54858,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":3073,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54865,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1516,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54867,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1757,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54868,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2500,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":10},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54870,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1419,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54873,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":432,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54871,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1449,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54875,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":337,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54669,"dip":"182.254.57.52","dport":443,"proto":"tcp","c2s_bytes":1868,"s2c_bytes":50960,"c2s_pkts":4,"s2c_pkts":39,"total_pkts":43,"duration":76147,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":146,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":7},{"bytes":449,"dir":1,"interval":2559},{"bytes":1440,"dir":2,"interval":493},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":4},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":37,"dir":2,"interval":0},{"bytes":451,"dir":1,"interval":20928},{"bytes":1440,"dir":2,"interval":20922},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":4},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":3},{"bytes":1440,"dir":2,"interval":0},{"bytes":858,"dir":2,"interval":0},{"bytes":451,"dir":1,"interval":21521},{"bytes":1440,"dir":2,"interval":21511},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":661,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gchat.qpic.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54869,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":3146,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54878,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":396,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54874,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1670,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54872,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2483,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":14},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54879,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":372,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54882,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":399,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54883,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":386,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54880,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1533,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54876,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2729,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54884,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":294,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54881,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2351,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54887,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":455,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54885,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1194,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54886,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5033,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":916,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54888,"dip":"59.83.218.28","dport":443,"proto":"tcp","c2s_bytes":944,"s2c_bytes":284381,"c2s_pkts":2,"s2c_pkts":198,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1246,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":26},{"bytes":427,"dir":1,"interval":508},{"bytes":1448,"dir":2,"interval":195},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":485,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":21},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":19},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":11},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"29638e037bcb80230d73d1f49c51d2dc.dd.cdntips.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54894,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":339,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54807,"dip":"14.18.180.113","dport":443,"proto":"tcp","c2s_bytes":962,"s2c_bytes":3749,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":32489,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":507,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42},{"bytes":73,"dir":2,"interval":0},{"bytes":405,"dir":1,"interval":2449},{"bytes":40,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":30741}],"tls":{"version":"tls1.2","sni":"h5.qzone.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54896,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":388,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":25},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54891,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1592,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54898,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":366,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54889,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3722,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":2278,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":515,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54900,"dip":"61.183.164.45","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":358,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"61.183.164.45","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54899,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1510,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54897,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3689,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":1352,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":442,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54890,"dip":"183.3.234.228","dport":443,"proto":"tcp","c2s_bytes":7362,"s2c_bytes":3730,"c2s_pkts":8,"s2c_pkts":5,"total_pkts":13,"duration":3713,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":519,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38},{"bytes":73,"dir":2,"interval":0},{"bytes":291,"dir":1,"interval":1077},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":412,"dir":1,"interval":4},{"bytes":1440,"dir":1,"interval":2},{"bytes":382,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"expeva.store.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54740,"dip":"61.183.164.82","dport":443,"proto":"tcp","c2s_bytes":3852,"s2c_bytes":55867,"c2s_pkts":16,"s2c_pkts":42,"total_pkts":58,"duration":62261,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":446,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":3126},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":298,"dir":1,"interval":0},{"bytes":180,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":1576},{"bytes":1460,"dir":2,"interval":23},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1036,"dir":2,"interval":0},{"bytes":182,"dir":1,"interval":4373},{"bytes":364,"dir":1,"interval":5473},{"bytes":42,"dir":1,"interval":630},{"bytes":180,"dir":1,"interval":0},{"bytes":180,"dir":1,"interval":1008},{"bytes":42,"dir":1,"interval":2797},{"bytes":42,"dir":1,"interval":1069},{"bytes":182,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":17166}],"tls":{"version":"tls1.2","sni":"m.qpic.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54902,"dip":"220.194.95.230","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":1588,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"220.194.95.230","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54843,"dip":"14.18.180.113","dport":443,"proto":"tcp","c2s_bytes":848,"s2c_bytes":4189,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":13500,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":492,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41},{"bytes":291,"dir":1,"interval":2492},{"bytes":40,"dir":1,"interval":0},{"bytes":387,"dir":2,"interval":377},{"bytes":138,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"h5.qzone.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54573,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":892,"s2c_bytes":48480,"c2s_pkts":7,"s2c_pkts":41,"total_pkts":48,"duration":120968,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1423,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":6144},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":150,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":965},{"bytes":1448,"dir":2,"interval":6},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":811,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":47,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1290,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":177}],"tls":{"version":"tls1.2","sni":"cmshowar.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54586,"dip":"182.254.52.100","dport":443,"proto":"tcp","c2s_bytes":872,"s2c_bytes":16072,"c2s_pkts":6,"s2c_pkts":16,"total_pkts":22,"duration":120211,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1338,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":5387},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":172,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":965},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sqimg.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54518,"dip":"120.221.218.233","dport":443,"proto":"tcp","c2s_bytes":2568,"s2c_bytes":95500,"c2s_pkts":23,"s2c_pkts":82,"total_pkts":105,"duration":273984,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":289,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":801},{"bytes":51,"dir":2,"interval":798},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":482},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":158,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":491},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":1036},{"bytes":1448,"dir":2,"interval":159},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":477,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":152634},{"bytes":294,"dir":2,"interval":151432},{"bytes":85,"dir":1,"interval":4267},{"bytes":293,"dir":2,"interval":4269},{"bytes":93,"dir":1,"interval":7351},{"bytes":1035,"dir":2,"interval":7348},{"bytes":86,"dir":1,"interval":2084},{"bytes":1448,"dir":2,"interval":2084},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":981,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":52},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":82},{"bytes":1448,"dir":2,"interval":0},{"bytes":444,"dir":2,"interval":0},{"bytes":106,"dir":1,"interval":25909},{"bytes":1448,"dir":2,"interval":25773},{"bytes":880,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":1807},{"bytes":106,"dir":1,"interval":0},{"bytes":1341,"dir":2,"interval":1806},{"bytes":1009,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":16386},{"bytes":1036,"dir":2,"interval":16391},{"bytes":106,"dir":1,"interval":7503},{"bytes":1448,"dir":2,"interval":7501},{"bytes":732,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":106,"dir":1,"interval":12987},{"bytes":940,"dir":2,"interval":12987},{"bytes":107,"dir":1,"interval":11475},{"bytes":788,"dir":2,"interval":12580},{"bytes":106,"dir":1,"interval":1230},{"bytes":1448,"dir":2,"interval":122},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":42},{"bytes":1448,"dir":2,"interval":4},{"bytes":1448,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":92,"dir":1,"interval":9849},{"bytes":1353,"dir":2,"interval":9802},{"bytes":106,"dir":1,"interval":2117},{"bytes":1448,"dir":2,"interval":2123},{"bytes":443,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":107,"dir":1,"interval":7926},{"bytes":1448,"dir":2,"interval":7919},{"bytes":558,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":107,"dir":1,"interval":2220},{"bytes":1448,"dir":2,"interval":2221},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":25},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":211},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":71},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":102},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":93},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":80},{"bytes":1107,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"i.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54837,"dip":"14.18.180.113","dport":443,"proto":"tcp","c2s_bytes":848,"s2c_bytes":4189,"c2s_pkts":3,"s2c_pkts":7,"total_pkts":10,"duration":17195,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":492,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":40},{"bytes":291,"dir":1,"interval":4767},{"bytes":40,"dir":1,"interval":0},{"bytes":387,"dir":2,"interval":320},{"bytes":138,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"h5.qzone.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54904,"dip":"125.39.171.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":193,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.13","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54892,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":3604,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.48.95","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54653,"dip":"182.254.48.95","dport":443,"proto":"tcp","c2s_bytes":1618,"s2c_bytes":21101,"c2s_pkts":15,"s2c_pkts":27,"total_pkts":42,"duration":86780,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":362,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":3606},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":176,"dir":1,"interval":0},{"bytes":82,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":1769},{"bytes":689,"dir":2,"interval":5},{"bytes":1448,"dir":2,"interval":0},{"bytes":176,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":13},{"bytes":81,"dir":1,"interval":717},{"bytes":1448,"dir":2,"interval":726},{"bytes":524,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":81,"dir":1,"interval":849},{"bytes":87,"dir":1,"interval":3},{"bytes":1031,"dir":2,"interval":848},{"bytes":537,"dir":2,"interval":4},{"bytes":82,"dir":1,"interval":2270},{"bytes":1217,"dir":2,"interval":2272},{"bytes":83,"dir":1,"interval":301},{"bytes":988,"dir":2,"interval":298},{"bytes":83,"dir":1,"interval":25492},{"bytes":1448,"dir":2,"interval":25493},{"bytes":804,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":82,"dir":1,"interval":10785},{"bytes":1448,"dir":2,"interval":10785},{"bytes":1044,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":81,"dir":1,"interval":13035},{"bytes":1448,"dir":2,"interval":13035},{"bytes":1448,"dir":2,"interval":0},{"bytes":180,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"imgcache.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54877,"dip":"182.254.59.187","dport":443,"proto":"tcp","c2s_bytes":837,"s2c_bytes":5292,"c2s_pkts":2,"s2c_pkts":6,"total_pkts":8,"duration":8363,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":17,"dir":2,"interval":0},{"bytes":298,"dir":2,"interval":8},{"bytes":320,"dir":1,"interval":2274},{"bytes":597,"dir":2,"interval":1244}],"tls":{"version":"tls1.2","sni":"d3g.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54851,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":20461,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":1347,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":8}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54911,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2353,"s2c_bytes":4169,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":732,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":512,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":1440,"dir":1,"interval":700},{"bytes":365,"dir":1,"interval":0},{"bytes":519,"dir":2,"interval":38},{"bytes":31,"dir":1,"interval":27}],"tls":{"version":"tls1.2","sni":"p.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54914,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1886,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":3},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":56384,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":1998,"s2c_bytes":4528,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":221,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":637,"dir":1,"interval":157},{"bytes":1188,"dir":1,"interval":0},{"bytes":893,"dir":2,"interval":151}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54921,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1164,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":56386,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2138,"s2c_bytes":3956,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":220,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":149},{"bytes":720,"dir":1,"interval":9},{"bytes":1168,"dir":1,"interval":0},{"bytes":321,"dir":2,"interval":143}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54923,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1339,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54925,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1301,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":34},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54926,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1287,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54929,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1273,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":32},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54930,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1546,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":56595,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2158,"s2c_bytes":4528,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":494,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":303},{"bytes":720,"dir":1,"interval":124},{"bytes":1188,"dir":1,"interval":0},{"bytes":893,"dir":2,"interval":252}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54927,"dip":"183.3.234.190","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4471,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":3638,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":561},{"bytes":1264,"dir":2,"interval":-644},{"bytes":258,"dir":2,"interval":1665},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wuji.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54934,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1921,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54905,"dip":"17.42.254.13","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5169,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":20074,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":10}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":54937,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1256,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54918,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":1554,"s2c_bytes":4653,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":10875,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":2,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":36},{"bytes":73,"dir":2,"interval":0},{"bytes":521,"dir":1,"interval":860},{"bytes":485,"dir":1,"interval":0},{"bytes":31,"dir":1,"interval":10000}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54938,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1280,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54939,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1317,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54941,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1637,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54942,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1198,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54943,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1270,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54944,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1288,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":24},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54946,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":2029,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54945,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":3321,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":27},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":57018,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":1880,"s2c_bytes":4145,"c2s_pkts":3,"s2c_pkts":6,"total_pkts":9,"duration":453,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":42},{"bytes":478,"dir":1,"interval":325},{"bytes":1232,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":161},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54951,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4951,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54932,"dip":"14.215.138.36","dport":443,"proto":"tcp","c2s_bytes":1150,"s2c_bytes":4118,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":32054,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":1348,"dir":2,"interval":0},{"bytes":781,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":38},{"bytes":602,"dir":1,"interval":976},{"bytes":383,"dir":2,"interval":574},{"bytes":31,"dir":1,"interval":31071}],"tls":{"version":"tls1.2","sni":"ptlogin.qidian.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54952,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4775,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54922,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":2560,"s2c_bytes":4963,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":40861,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1427,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":37},{"bytes":521,"dir":1,"interval":719},{"bytes":485,"dir":1,"interval":3},{"bytes":199,"dir":2,"interval":328},{"bytes":521,"dir":1,"interval":9200},{"bytes":485,"dir":1,"interval":0},{"bytes":199,"dir":2,"interval":9200},{"bytes":31,"dir":1,"interval":30936}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":57668,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2201,"s2c_bytes":3956,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":200,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":45,"dir":1,"interval":133},{"bytes":720,"dir":1,"interval":4},{"bytes":1231,"dir":1,"interval":0},{"bytes":321,"dir":2,"interval":81}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":57667,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":1755,"s2c_bytes":4145,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":1276,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":43},{"bytes":45,"dir":1,"interval":1132},{"bytes":478,"dir":1,"interval":6},{"bytes":1030,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":167},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54961,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4780,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54949,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":4682,"s2c_bytes":4470,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":37993,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":817,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":45},{"bytes":487,"dir":1,"interval":1595},{"bytes":1440,"dir":1,"interval":2},{"bytes":87,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":134},{"bytes":34,"dir":2,"interval":0},{"bytes":487,"dir":1,"interval":5902},{"bytes":1440,"dir":1,"interval":0},{"bytes":193,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":5902},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30449},{"bytes":31,"dir":2,"interval":30399}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54920,"dip":"66.220.146.94","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":63143,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"iadsdk.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54962,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":5360,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":57946,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2193,"s2c_bytes":4466,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":179,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":109},{"bytes":720,"dir":1,"interval":2},{"bytes":1223,"dir":1,"interval":1},{"bytes":831,"dir":2,"interval":94}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54963,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1300,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54965,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1177,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54966,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1205,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54968,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1227,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54969,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1217,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":33},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54973,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1191,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":32},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54974,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1195,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":2},{"bytes":258,"dir":2,"interval":22},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54975,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":2292,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":17},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54976,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1188,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":30},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54978,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":100,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54977,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4788,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58265,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2202,"s2c_bytes":3956,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":1342,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":2},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":11},{"bytes":45,"dir":1,"interval":1275},{"bytes":720,"dir":1,"interval":3},{"bytes":1232,"dir":1,"interval":1},{"bytes":321,"dir":2,"interval":110}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54987,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4776,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58369,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":2006,"s2c_bytes":4145,"c2s_pkts":4,"s2c_pkts":6,"total_pkts":10,"duration":616,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":45},{"bytes":45,"dir":1,"interval":483},{"bytes":478,"dir":1,"interval":4},{"bytes":1281,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":152},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54988,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4762,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54971,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":2559,"s2c_bytes":4197,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":31465,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":817,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":44},{"bytes":487,"dir":1,"interval":1258},{"bytes":1440,"dir":1,"interval":1},{"bytes":84,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":122},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30201}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54906,"dip":"182.254.21.113","dport":443,"proto":"tcp","c2s_bytes":1373,"s2c_bytes":4624,"c2s_pkts":10,"s2c_pkts":11,"total_pkts":21,"duration":121147,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":859},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":287,"dir":1,"interval":0},{"bytes":61,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":147,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":53},{"bytes":55,"dir":2,"interval":5},{"bytes":126,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":126,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":120281}],"tls":{"version":"tls1.2","sni":"mtrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54990,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":5025,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54991,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":5028,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54992,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4779,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54993,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4783,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54994,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":4759,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":56382,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":173,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":135982,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":31,"dir":2,"interval":57562}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":56381,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":173,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":142285,"packets":[{"bytes":173,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":31,"dir":2,"interval":57560}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":56700,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":4628,"s2c_bytes":4673,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":128946,"packets":[{"bytes":170,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":1440,"dir":1,"interval":201},{"bytes":1000,"dir":1,"interval":0},{"bytes":519,"dir":2,"interval":57},{"bytes":1440,"dir":1,"interval":59756},{"bytes":578,"dir":1,"interval":0},{"bytes":519,"dir":2,"interval":59755}],"tls":{"version":"tls1.2","sni":"p.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54986,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":15102,"s2c_bytes":8144,"c2s_pkts":27,"s2c_pkts":50,"total_pkts":77,"duration":58374,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1612},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":501,"dir":1,"interval":0},{"bytes":90,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":809,"dir":1,"interval":0},{"bytes":761,"dir":1,"interval":0},{"bytes":750,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":65},{"bytes":68,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":4},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":16},{"bytes":279,"dir":1,"interval":0},{"bytes":157,"dir":1,"interval":-5},{"bytes":1440,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":835,"dir":1,"interval":0},{"bytes":102,"dir":2,"interval":11},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":6},{"bytes":111,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":761,"dir":1,"interval":8605},{"bytes":102,"dir":2,"interval":8592},{"bytes":38,"dir":2,"interval":0},{"bytes":762,"dir":1,"interval":5339},{"bytes":102,"dir":2,"interval":5339},{"bytes":38,"dir":2,"interval":0},{"bytes":761,"dir":1,"interval":5346},{"bytes":102,"dir":2,"interval":5346},{"bytes":38,"dir":2,"interval":0},{"bytes":753,"dir":1,"interval":5328},{"bytes":102,"dir":2,"interval":5329},{"bytes":38,"dir":2,"interval":0},{"bytes":91,"dir":1,"interval":3682},{"bytes":797,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":3680},{"bytes":90,"dir":1,"interval":9},{"bytes":277,"dir":1,"interval":0},{"bytes":270,"dir":2,"interval":7},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":5},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":763,"dir":1,"interval":1637},{"bytes":102,"dir":2,"interval":1634},{"bytes":38,"dir":2,"interval":0},{"bytes":761,"dir":1,"interval":5320},{"bytes":102,"dir":2,"interval":5320},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":21479}],"tls":{"version":"tls1.2","sni":"btrace.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54979,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":1368,"s2c_bytes":39503,"c2s_pkts":8,"s2c_pkts":33,"total_pkts":41,"duration":59124,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1323,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":245},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":428,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":73},{"bytes":1460,"dir":2,"interval":9},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":209,"dir":1,"interval":324},{"bytes":1460,"dir":2,"interval":311},{"bytes":1460,"dir":2,"interval":0},{"bytes":914,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":58548}],"tls":{"version":"tls1.2","sni":"v.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54989,"dip":"182.254.76.113","dport":443,"proto":"tcp","c2s_bytes":1136,"s2c_bytes":4811,"c2s_pkts":7,"s2c_pkts":7,"total_pkts":14,"duration":53439,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1354,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":345},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":405,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":76},{"bytes":172,"dir":2,"interval":40},{"bytes":31,"dir":1,"interval":53065}],"tls":{"version":"tls1.2","sni":"vfiles.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54984,"dip":"163.177.92.114","dport":443,"proto":"tcp","c2s_bytes":1476,"s2c_bytes":5403,"c2s_pkts":8,"s2c_pkts":10,"total_pkts":18,"duration":58517,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1264,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":45},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":354},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":575,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":89},{"bytes":409,"dir":2,"interval":52},{"bytes":38,"dir":2,"interval":0},{"bytes":170,"dir":1,"interval":29607},{"bytes":409,"dir":2,"interval":29561},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":28525}],"tls":{"version":"tls1.2","sni":"access.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59701,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":1841,"s2c_bytes":3966,"c2s_pkts":6,"s2c_pkts":6,"total_pkts":12,"duration":821,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":830,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":283},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":278},{"bytes":478,"dir":1,"interval":238},{"bytes":1035,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":242},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":54999,"dip":"17.248.159.175","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":4833,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":9923,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":753,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":180}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55152,"dip":"17.248.159.175","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":4834,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":7556,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":572,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":588,"dir":2,"interval":0},{"bytes":754,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":246}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55044,"dip":"17.56.12.41","dport":443,"proto":"tcp","c2s_bytes":835,"s2c_bytes":3306,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":18703,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1274,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":685}],"tls":{"version":"tls1.2","sni":"gsp64-ssl.ls.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60008,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2280,"s2c_bytes":3777,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":279,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":525,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":126},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":122},{"bytes":720,"dir":1,"interval":67},{"bytes":1229,"dir":1,"interval":1},{"bytes":321,"dir":2,"interval":79}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":60110,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2206,"s2c_bytes":2088,"c2s_pkts":5,"s2c_pkts":3,"total_pkts":8,"duration":189,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":6,"dir":1,"interval":52},{"bytes":45,"dir":1,"interval":0},{"bytes":720,"dir":1,"interval":12},{"bytes":1230,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":107},{"bytes":511,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":55205,"dip":"17.248.159.241","dport":443,"proto":"tcp","c2s_bytes":610,"s2c_bytes":4835,"c2s_pkts":2,"s2c_pkts":5,"total_pkts":7,"duration":18353,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":755,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":375}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":60214,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":1856,"s2c_bytes":342,"c2s_pkts":5,"s2c_pkts":3,"total_pkts":8,"duration":179,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":137,"dir":2,"interval":0},{"bytes":6,"dir":1,"interval":94},{"bytes":45,"dir":1,"interval":0},{"bytes":478,"dir":1,"interval":0},{"bytes":1125,"dir":1,"interval":0},{"bytes":171,"dir":2,"interval":101},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":55232,"dip":"17.56.12.41","dport":443,"proto":"tcp","c2s_bytes":835,"s2c_bytes":3306,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":18570,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1274,"dir":2,"interval":0},{"bytes":318,"dir":1,"interval":563}],"tls":{"version":"tls1.2","sni":"gsp64-ssl.ls.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":55237,"dip":"17.56.12.41","dport":443,"proto":"tcp","c2s_bytes":203,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":518,"packets":[{"bytes":203,"dir":1,"interval":0}],"tls":{"version":"tls1.0","sni":"gsp64-ssl.ls.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,35,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":55233,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":42369,"s2c_bytes":4018,"c2s_pkts":33,"s2c_pkts":6,"total_pkts":39,"duration":31457,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":845,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":117},{"bytes":51,"dir":2,"interval":110},{"bytes":488,"dir":1,"interval":104},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":117},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":178},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":94},{"bytes":1440,"dir":1,"interval":-94},{"bytes":1440,"dir":1,"interval":211},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":-119},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":118},{"bytes":1440,"dir":1,"interval":8},{"bytes":1440,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":109},{"bytes":1440,"dir":1,"interval":0},{"bytes":887,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":747},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30562}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55235,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":27552,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55236,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":27778,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59702,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2359,"s2c_bytes":3975,"c2s_pkts":6,"s2c_pkts":5,"total_pkts":11,"duration":69156,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":525,"dir":2,"interval":0},{"bytes":75,"dir":1,"interval":250},{"bytes":6,"dir":1,"interval":0},{"bytes":45,"dir":1,"interval":0},{"bytes":51,"dir":2,"interval":247},{"bytes":1440,"dir":1,"interval":178},{"bytes":591,"dir":1,"interval":0},{"bytes":519,"dir":2,"interval":182}],"tls":{"version":"tls1.2","sni":"p.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":55247,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":938,"s2c_bytes":7192,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":2417,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":965,"dir":2,"interval":0},{"bytes":85,"dir":1,"interval":1089},{"bytes":43,"dir":2,"interval":1086},{"bytes":61,"dir":2,"interval":0},{"bytes":45,"dir":1,"interval":47},{"bytes":42,"dir":1,"interval":1},{"bytes":34,"dir":1,"interval":0},{"bytes":162,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":1},{"bytes":30,"dir":2,"interval":51},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":253,"dir":2,"interval":0},{"bytes":23,"dir":1,"interval":1242}],"tls":{"version":"tls1.2","sni":"configuration.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55246,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":3048,"s2c_bytes":394,"c2s_pkts":6,"s2c_pkts":3,"total_pkts":9,"duration":31039,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":152,"dir":2,"interval":0},{"bytes":51,"dir":1,"interval":50},{"bytes":487,"dir":1,"interval":1},{"bytes":1440,"dir":1,"interval":1},{"bytes":522,"dir":1,"interval":0},{"bytes":208,"dir":2,"interval":59},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":30940}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55248,"dip":"17.248.161.136","dport":443,"proto":"tcp","c2s_bytes":2226,"s2c_bytes":8256,"c2s_pkts":5,"s2c_pkts":9,"total_pkts":14,"duration":32004,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1432,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":10},{"bytes":600,"dir":2,"interval":0},{"bytes":848,"dir":2,"interval":0},{"bytes":1325,"dir":2,"interval":10},{"bytes":93,"dir":1,"interval":581},{"bytes":51,"dir":2,"interval":332},{"bytes":1188,"dir":1,"interval":879},{"bytes":397,"dir":1,"interval":-594},{"bytes":1088,"dir":2,"interval":955},{"bytes":31,"dir":1,"interval":31137}],"tls":{"version":"tls1.2","sni":"p46-keyvalueservice.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55249,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":26863,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55250,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":27193,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55259,"dip":"17.248.161.109","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3666,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":259,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1307,"dir":2,"interval":0},{"bytes":327,"dir":2,"interval":79}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55251,"dip":"17.42.254.14","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5220,"c2s_pkts":1,"s2c_pkts":7,"total_pkts":8,"duration":910,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":747,"dir":2,"interval":0},{"bytes":342,"dir":2,"interval":5},{"bytes":51,"dir":2,"interval":254}],"tls":{"version":"tls1.2","sni":"p55-buy.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":55252,"dip":"58.250.137.69","dport":443,"proto":"tcp","c2s_bytes":1275,"s2c_bytes":4955,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":2708,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1264,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":46},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":676},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":575,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":199},{"bytes":408,"dir":2,"interval":64},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":141}],"tls":{"version":"tls1.2","sni":"access.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55261,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":2368,"s2c_bytes":4912,"c2s_pkts":9,"s2c_pkts":11,"total_pkts":20,"duration":1753,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1160},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":501,"dir":1,"interval":0},{"bytes":91,"dir":1,"interval":0},{"bytes":799,"dir":1,"interval":0},{"bytes":277,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":258},{"bytes":55,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":5},{"bytes":38,"dir":2,"interval":0},{"bytes":270,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":27}],"tls":{"version":"tls1.2","sni":"btrace.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61976,"dip":"121.51.142.32","dport":443,"proto":"tcp","c2s_bytes":2301,"s2c_bytes":4177,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":674,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":802,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":45},{"bytes":45,"dir":1,"interval":466},{"bytes":455,"dir":1,"interval":102},{"bytes":1440,"dir":1,"interval":10},{"bytes":159,"dir":1,"interval":0},{"bytes":203,"dir":2,"interval":341},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dp3.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":61978,"dip":"111.13.34.115","dport":443,"proto":"tcp","c2s_bytes":2235,"s2c_bytes":3956,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":190,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":497,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":9},{"bytes":45,"dir":1,"interval":123},{"bytes":720,"dir":1,"interval":8},{"bytes":1265,"dir":1,"interval":2},{"bytes":321,"dir":2,"interval":98}],"tls":{"version":"tls1.2","sni":"news.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":55276,"dip":"122.14.43.166","dport":443,"proto":"tcp","c2s_bytes":1284,"s2c_bytes":268107,"c2s_pkts":9,"s2c_pkts":191,"total_pkts":200,"duration":0,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":277,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":186},{"bytes":53,"dir":1,"interval":30},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":291,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":94},{"bytes":1460,"dir":2,"interval":9},{"bytes":1229,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":869,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":47},{"bytes":1460,"dir":2,"interval":33},{"bytes":682,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":427,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1041,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1187,"dir":2,"interval":0},{"bytes":125,"dir":1,"interval":579},{"bytes":1460,"dir":2,"interval":563},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"mconf.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55268,"dip":"58.250.137.94","dport":443,"proto":"tcp","c2s_bytes":980,"s2c_bytes":4487,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":1562,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":925,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":41},{"bytes":348,"dir":1,"interval":1433},{"bytes":115,"dir":1,"interval":0},{"bytes":408,"dir":2,"interval":166}],"tls":{"version":"tls1.2","sni":"api.poll.aiseet.atianqi.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55267,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":5330,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":1118,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1176,"dir":2,"interval":0},{"bytes":907,"dir":2,"interval":1},{"bytes":258,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":58798,"dip":"139.215.192.212","dport":443,"proto":"tcp","c2s_bytes":870,"s2c_bytes":3897,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":793195083,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":25},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":868},{"bytes":45,"dir":1,"interval":1},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":386,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":371},{"bytes":436,"dir":2,"interval":59},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":110}],"tls":{"version":"tls1.2","sni":"webcast3-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":59012,"dip":"122.14.43.38","dport":443,"proto":"tcp","c2s_bytes":1213,"s2c_bytes":4182,"c2s_pkts":8,"s2c_pkts":7,"total_pkts":15,"duration":793008267,"packets":[{"bytes":212,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":358},{"bytes":45,"dir":1,"interval":15},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":487,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":197},{"bytes":982,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":136},{"bytes":239,"dir":1,"interval":2803}],"tls":{"version":"tls1.2","sni":"sf3-ttcdn-tos.pstatp.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":58924,"dip":"122.14.230.134","dport":443,"proto":"tcp","c2s_bytes":4734,"s2c_bytes":13344,"c2s_pkts":35,"s2c_pkts":57,"total_pkts":92,"duration":793011521,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":281,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":504},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":252,"dir":1,"interval":0},{"bytes":132,"dir":1,"interval":0},{"bytes":129,"dir":1,"interval":0},{"bytes":127,"dir":1,"interval":0},{"bytes":133,"dir":1,"interval":0},{"bytes":131,"dir":1,"interval":0},{"bytes":130,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":129,"dir":1,"interval":0},{"bytes":131,"dir":1,"interval":0},{"bytes":127,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":250},{"bytes":284,"dir":2,"interval":2},{"bytes":48,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":367,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":259,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":368,"dir":2,"interval":1},{"bytes":48,"dir":2,"interval":0},{"bytes":375,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":415,"dir":2,"interval":0},{"bytes":279,"dir":2,"interval":1},{"bytes":48,"dir":2,"interval":0},{"bytes":278,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":30,"dir":1,"interval":199},{"bytes":133,"dir":1,"interval":0},{"bytes":130,"dir":1,"interval":0},{"bytes":381,"dir":2,"interval":193},{"bytes":48,"dir":2,"interval":0},{"bytes":288,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":130,"dir":1,"interval":82},{"bytes":285,"dir":2,"interval":80},{"bytes":48,"dir":2,"interval":0},{"bytes":134,"dir":1,"interval":11},{"bytes":375,"dir":2,"interval":12},{"bytes":48,"dir":2,"interval":0},{"bytes":134,"dir":1,"interval":114},{"bytes":292,"dir":2,"interval":114},{"bytes":48,"dir":2,"interval":0},{"bytes":134,"dir":1,"interval":366},{"bytes":134,"dir":1,"interval":0},{"bytes":134,"dir":1,"interval":0},{"bytes":288,"dir":2,"interval":365},{"bytes":48,"dir":2,"interval":0},{"bytes":287,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":329,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":133,"dir":1,"interval":1663},{"bytes":378,"dir":2,"interval":1659},{"bytes":48,"dir":2,"interval":0},{"bytes":134,"dir":1,"interval":223},{"bytes":292,"dir":2,"interval":223},{"bytes":48,"dir":2,"interval":0},{"bytes":135,"dir":1,"interval":77},{"bytes":309,"dir":2,"interval":77},{"bytes":48,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":179},{"bytes":134,"dir":1,"interval":0},{"bytes":130,"dir":1,"interval":0},{"bytes":366,"dir":2,"interval":179},{"bytes":48,"dir":2,"interval":0},{"bytes":376,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":284,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":129,"dir":1,"interval":208},{"bytes":372,"dir":2,"interval":204},{"bytes":48,"dir":2,"interval":0},{"bytes":130,"dir":1,"interval":2914},{"bytes":136,"dir":1,"interval":23},{"bytes":134,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"dig.bdurl.net","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59010,"dip":"122.14.43.42","dport":443,"proto":"tcp","c2s_bytes":4825,"s2c_bytes":3909,"c2s_pkts":11,"s2c_pkts":8,"total_pkts":19,"duration":793008324,"packets":[{"bytes":210,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":156,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":68},{"bytes":45,"dir":1,"interval":4},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":12},{"bytes":30,"dir":1,"interval":1},{"bytes":738,"dir":1,"interval":1},{"bytes":446,"dir":2,"interval":61},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":1,"interval":653},{"bytes":164,"dir":1,"interval":0},{"bytes":990,"dir":1,"interval":5032},{"bytes":988,"dir":1,"interval":45}],"tls":{"version":"tls1.2","sni":"webcast3-hl.ixigua.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50659,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":6298,"s2c_bytes":8033,"c2s_pkts":17,"s2c_pkts":15,"total_pkts":32,"duration":793008244,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":336},{"bytes":53,"dir":1,"interval":148},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":738,"dir":1,"interval":0},{"bytes":154,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":330},{"bytes":153,"dir":1,"interval":1},{"bytes":154,"dir":1,"interval":0},{"bytes":337,"dir":1,"interval":0},{"bytes":1255,"dir":1,"interval":0},{"bytes":268,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":588,"dir":1,"interval":1},{"bytes":334,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":548,"dir":2,"interval":15},{"bytes":38,"dir":2,"interval":0},{"bytes":391,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":866,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":490,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":6977}],"tls":{"version":"tls1.2","sni":"gurd.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50649,"dip":"121.22.232.211","dport":443,"proto":"tcp","c2s_bytes":1354,"s2c_bytes":4096,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":793011817,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":8},{"bytes":126,"dir":1,"interval":84},{"bytes":649,"dir":1,"interval":18},{"bytes":31,"dir":1,"interval":11},{"bytes":957,"dir":2,"interval":95},{"bytes":44,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":10924}],"tls":{"version":"tls1.2","sni":"mon.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50656,"dip":"103.107.217.130","dport":443,"proto":"tcp","c2s_bytes":933,"s2c_bytes":3838,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":793010227,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":429},{"bytes":259,"dir":1,"interval":7},{"bytes":270,"dir":2,"interval":99},{"bytes":31,"dir":1,"interval":9034}],"tls":{"version":"tls1.2","sni":"upload.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50655,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1279,"s2c_bytes":3822,"c2s_pkts":4,"s2c_pkts":5,"total_pkts":9,"duration":793010703,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":447},{"bytes":605,"dir":1,"interval":4},{"bytes":270,"dir":2,"interval":30},{"bytes":31,"dir":1,"interval":9497}],"tls":{"version":"tls1.2","sni":"upload.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50645,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":2489,"s2c_bytes":4362,"c2s_pkts":6,"s2c_pkts":7,"total_pkts":13,"duration":793012074,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":296},{"bytes":605,"dir":1,"interval":211},{"bytes":270,"dir":2,"interval":230},{"bytes":605,"dir":1,"interval":551},{"bytes":270,"dir":2,"interval":551},{"bytes":605,"dir":1,"interval":1295},{"bytes":270,"dir":2,"interval":1295},{"bytes":31,"dir":1,"interval":8966}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50629,"dip":"120.133.135.36","dport":443,"proto":"tcp","c2s_bytes":933,"s2c_bytes":2768,"c2s_pkts":4,"s2c_pkts":4,"total_pkts":8,"duration":793014234,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":748,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":33},{"bytes":126,"dir":1,"interval":216},{"bytes":259,"dir":1,"interval":18},{"bytes":270,"dir":2,"interval":74},{"bytes":31,"dir":1,"interval":13245}],"tls":{"version":"tls1.2","sni":"apihn1.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50598,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":2554,"s2c_bytes":14651,"c2s_pkts":7,"s2c_pkts":13,"total_pkts":20,"duration":793022806,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":743,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":7},{"bytes":126,"dir":1,"interval":551},{"bytes":720,"dir":1,"interval":12},{"bytes":273,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":395},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":272,"dir":2,"interval":0},{"bytes":681,"dir":1,"interval":5197},{"bytes":206,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":4866},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":294,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":16312}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50537,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":11137,"s2c_bytes":11730,"c2s_pkts":23,"s2c_pkts":18,"total_pkts":41,"duration":793058589,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":374,"dir":2,"interval":0},{"bytes":290,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":373},{"bytes":685,"dir":1,"interval":12},{"bytes":206,"dir":1,"interval":1},{"bytes":325,"dir":2,"interval":45},{"bytes":689,"dir":1,"interval":17266},{"bytes":266,"dir":1,"interval":0},{"bytes":304,"dir":2,"interval":17265},{"bytes":689,"dir":1,"interval":13688},{"bytes":265,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":13693},{"bytes":68,"dir":2,"interval":0},{"bytes":689,"dir":1,"interval":379},{"bytes":265,"dir":1,"interval":0},{"bytes":304,"dir":2,"interval":375},{"bytes":955,"dir":1,"interval":642},{"bytes":1452,"dir":2,"interval":645},{"bytes":276,"dir":2,"interval":0},{"bytes":689,"dir":1,"interval":3337},{"bytes":265,"dir":1,"interval":0},{"bytes":304,"dir":2,"interval":3333},{"bytes":689,"dir":1,"interval":1343},{"bytes":266,"dir":1,"interval":0},{"bytes":303,"dir":2,"interval":1345},{"bytes":689,"dir":1,"interval":845},{"bytes":266,"dir":1,"interval":0},{"bytes":303,"dir":2,"interval":844},{"bytes":689,"dir":1,"interval":431},{"bytes":265,"dir":1,"interval":0},{"bytes":304,"dir":2,"interval":431},{"bytes":682,"dir":1,"interval":3225},{"bytes":363,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":3226},{"bytes":987,"dir":2,"interval":0},{"bytes":891,"dir":1,"interval":755},{"bytes":328,"dir":2,"interval":753},{"bytes":31,"dir":1,"interval":15558}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50613,"dip":"39.96.122.1","dport":443,"proto":"tcp","c2s_bytes":3390,"s2c_bytes":5492,"c2s_pkts":9,"s2c_pkts":7,"total_pkts":16,"duration":793016988,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":382,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":199},{"bytes":679,"dir":1,"interval":4},{"bytes":218,"dir":1,"interval":0},{"bytes":260,"dir":2,"interval":69},{"bytes":689,"dir":1,"interval":239},{"bytes":224,"dir":1,"interval":0},{"bytes":654,"dir":2,"interval":245},{"bytes":685,"dir":1,"interval":571},{"bytes":221,"dir":1,"interval":1},{"bytes":1026,"dir":2,"interval":565},{"bytes":31,"dir":1,"interval":15240}],"tls":{"version":"tls1.2","sni":"apissl.gifshow.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50611,"dip":"103.107.217.165","dport":443,"proto":"tcp","c2s_bytes":3492,"s2c_bytes":2778,"c2s_pkts":6,"s2c_pkts":4,"total_pkts":10,"duration":793017010,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":741,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":290},{"bytes":697,"dir":1,"interval":9},{"bytes":1452,"dir":1,"interval":3},{"bytes":669,"dir":1,"interval":0},{"bytes":311,"dir":2,"interval":42},{"bytes":31,"dir":1,"interval":15974}],"tls":{"version":"tls1.2","sni":"apinew.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50608,"dip":"103.107.217.65","dport":443,"proto":"tcp","c2s_bytes":1572,"s2c_bytes":6075,"c2s_pkts":5,"s2c_pkts":6,"total_pkts":11,"duration":793017034,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":359,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":6},{"bytes":126,"dir":1,"interval":305},{"bytes":692,"dir":1,"interval":8},{"bytes":206,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":45},{"bytes":1086,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":15988}],"tls":{"version":"tls1.2","sni":"apissl.ksapisrv.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50863,"dip":"203.208.39.215","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":3002,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":792894942,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":958,"dir":2,"interval":0},{"bytes":596,"dir":2,"interval":41},{"bytes":523,"dir":1,"interval":257}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50868,"dip":"203.208.39.215","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":3001,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":792892576,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":596,"dir":2,"interval":38},{"bytes":523,"dir":1,"interval":227}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50895,"dip":"114.113.88.123","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3071,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":792798967,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":151,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"p1-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59767,"dip":"122.14.43.37","dport":443,"proto":"tcp","c2s_bytes":7504,"s2c_bytes":3204,"c2s_pkts":11,"s2c_pkts":6,"total_pkts":17,"duration":792789170,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":1},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":101},{"bytes":45,"dir":1,"interval":0},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":7},{"bytes":1460,"dir":1,"interval":3},{"bytes":1044,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":27},{"bytes":1178,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1},{"bytes":42,"dir":2,"interval":35},{"bytes":140,"dir":1,"interval":6}],"tls":{"version":"tls1.2","sni":"mon-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":59631,"dip":"125.39.135.237","dport":443,"proto":"tcp","c2s_bytes":45172,"s2c_bytes":6953,"c2s_pkts":44,"s2c_pkts":21,"total_pkts":65,"duration":792894803,"packets":[{"bytes":205,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":116},{"bytes":45,"dir":1,"interval":1},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":1005,"dir":1,"interval":0},{"bytes":509,"dir":1,"interval":0},{"bytes":466,"dir":1,"interval":0},{"bytes":642,"dir":1,"interval":0},{"bytes":642,"dir":1,"interval":0},{"bytes":754,"dir":1,"interval":0},{"bytes":518,"dir":1,"interval":0},{"bytes":202,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":60},{"bytes":1039,"dir":2,"interval":28},{"bytes":38,"dir":2,"interval":0},{"bytes":481,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":839,"dir":2,"interval":3},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":586,"dir":2,"interval":10},{"bytes":38,"dir":2,"interval":0},{"bytes":494,"dir":1,"interval":60161},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":1},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":46,"dir":2,"interval":60118},{"bytes":42,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":4},{"bytes":1460,"dir":1,"interval":26},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1398,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":21},{"bytes":42,"dir":2,"interval":0},{"bytes":394,"dir":2,"interval":32},{"bytes":38,"dir":2,"interval":0},{"bytes":492,"dir":1,"interval":49910},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":4},{"bytes":1422,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":2},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":1},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":4},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":3},{"bytes":1460,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":0},{"bytes":1176,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"log-hl.snssdk.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":50892,"dip":"182.18.72.137","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":8038,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":792802480,"packets":[{"bytes":530,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":569,"dir":1,"interval":614},{"bytes":58,"dir":1,"interval":4},{"bytes":287,"dir":2,"interval":10},{"bytes":287,"dir":2,"interval":0},{"bytes":279,"dir":1,"interval":3},{"bytes":1448,"dir":2,"interval":15},{"bytes":1448,"dir":2,"interval":0},{"bytes":1210,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":19545}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":50886,"dip":"122.14.43.166","dport":443,"proto":"tcp","c2s_bytes":2394,"s2c_bytes":27783,"c2s_pkts":9,"s2c_pkts":24,"total_pkts":33,"duration":792826208,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":271,"dir":2,"interval":0},{"bytes":226,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":238},{"bytes":287,"dir":1,"interval":40},{"bytes":1460,"dir":2,"interval":93},{"bytes":1460,"dir":2,"interval":0},{"bytes":920,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":9683},{"bytes":1460,"dir":2,"interval":9700},{"bytes":59,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1050,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":16912},{"bytes":1434,"dir":2,"interval":16899},{"bytes":1460,"dir":2,"interval":0},{"bytes":1352,"dir":2,"interval":0},{"bytes":286,"dir":1,"interval":86},{"bytes":1460,"dir":2,"interval":86},{"bytes":1460,"dir":2,"interval":0},{"bytes":1246,"dir":2,"interval":0},{"bytes":287,"dir":1,"interval":1193},{"bytes":1460,"dir":2,"interval":1188},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":55,"dir":2,"interval":0},{"bytes":286,"dir":1,"interval":8767},{"bytes":1460,"dir":2,"interval":8770},{"bytes":1460,"dir":2,"interval":0},{"bytes":730,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":6979}],"tls":{"version":"tls1.2","sni":"p3-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50891,"dip":"121.22.232.211","dport":443,"proto":"tcp","c2s_bytes":2960,"s2c_bytes":5099,"c2s_pkts":7,"s2c_pkts":8,"total_pkts":15,"duration":792810968,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1359,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":8},{"bytes":126,"dir":1,"interval":1807},{"bytes":638,"dir":1,"interval":5},{"bytes":505,"dir":1,"interval":0},{"bytes":967,"dir":2,"interval":972},{"bytes":34,"dir":2,"interval":0},{"bytes":638,"dir":1,"interval":17725},{"bytes":505,"dir":1,"interval":0},{"bytes":959,"dir":2,"interval":17732},{"bytes":44,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":9121}],"tls":{"version":"tls1.2","sni":"mon.snssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":50893,"dip":"182.18.72.137","dport":443,"proto":"tcp","c2s_bytes":1461,"s2c_bytes":7298,"c2s_pkts":5,"s2c_pkts":8,"total_pkts":13,"duration":792802480,"packets":[{"bytes":530,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":462,"dir":2,"interval":0},{"bytes":569,"dir":1,"interval":22},{"bytes":287,"dir":2,"interval":10},{"bytes":287,"dir":2,"interval":0},{"bytes":58,"dir":1,"interval":4},{"bytes":280,"dir":1,"interval":3},{"bytes":1448,"dir":2,"interval":18},{"bytes":1448,"dir":2,"interval":0},{"bytes":470,"dir":2,"interval":0},{"bytes":24,"dir":1,"interval":20140}],"tls":{"version":"tls1.2","sni":"p9-dy.byteimg.com","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,41]}}
{"sip":"192.168.50.193","sport":51025,"dip":"31.13.84.8","dport":443,"proto":"tcp","c2s_bytes":1284,"s2c_bytes":4590,"c2s_pkts":9,"s2c_pkts":5,"total_pkts":14,"duration":792737883,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1114,"dir":2,"interval":0},{"bytes":64,"dir":1,"interval":315},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":118,"dir":1,"interval":0},{"bytes":406,"dir":1,"interval":0},{"bytes":296,"dir":2,"interval":273},{"bytes":1148,"dir":2,"interval":109},{"bytes":31,"dir":1,"interval":357},{"bytes":24,"dir":1,"interval":-70}],"tls":{"version":"tls1.2","sni":"graph.facebook.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":59671,"dip":"139.215.192.210","dport":443,"proto":"tcp","c2s_bytes":2664,"s2c_bytes":9732,"c2s_pkts":11,"s2c_pkts":22,"total_pkts":33,"duration":792889282,"packets":[{"bytes":209,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":154,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":28},{"bytes":69,"dir":2,"interval":0},{"bytes":118,"dir":1,"interval":513},{"bytes":45,"dir":1,"interval":17},{"bytes":48,"dir":1,"interval":0},{"bytes":34,"dir":1,"interval":0},{"bytes":30,"dir":1,"interval":0},{"bytes":387,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":75},{"bytes":437,"dir":2,"interval":62},{"bytes":38,"dir":2,"interval":0},{"bytes":627,"dir":1,"interval":58210},{"bytes":38,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":58209},{"bytes":710,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":460,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":20},{"bytes":572,"dir":1,"interval":7146},{"bytes":733,"dir":2,"interval":7133},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":556,"dir":1,"interval":5987},{"bytes":678,"dir":2,"interval":6459},{"bytes":48,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":46,"dir":2,"interval":120001},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"webcast3-hl.amemv.com","alpn":"\u0002h2\bhttp/1.1","cipher_suites":["c02b","c02f","c02c","c030","c013","c014","009c","009d","002f","0035","000a"],"extensions_list":[65281,0,23,35,13,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":51543,"dip":"182.254.53.143","dport":443,"proto":"tcp","c2s_bytes":1935,"s2c_bytes":15552,"c2s_pkts":16,"s2c_pkts":20,"total_pkts":36,"duration":792558044,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":95},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":278,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":39},{"bytes":1460,"dir":2,"interval":5},{"bytes":269,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":672},{"bytes":1460,"dir":2,"interval":670},{"bytes":1021,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":3099},{"bytes":1460,"dir":2,"interval":3099},{"bytes":1460,"dir":2,"interval":0},{"bytes":42,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":104,"dir":1,"interval":90},{"bytes":1460,"dir":2,"interval":89},{"bytes":455,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":105,"dir":1,"interval":12767},{"bytes":1460,"dir":2,"interval":12767},{"bytes":257,"dir":2,"interval":0},{"bytes":152,"dir":1,"interval":7059},{"bytes":130,"dir":1,"interval":173},{"bytes":130,"dir":1,"interval":83},{"bytes":42,"dir":1,"interval":4753},{"bytes":42,"dir":1,"interval":168},{"bytes":42,"dir":1,"interval":83}],"tls":{"version":"tls1.2","sni":"t21img.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51533,"dip":"49.234.0.100","dport":443,"proto":"tcp","c2s_bytes":3632,"s2c_bytes":3876,"c2s_pkts":10,"s2c_pkts":8,"total_pkts":18,"duration":792568055,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":439,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":30},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":237},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":386,"dir":1,"interval":0},{"bytes":1440,"dir":1,"interval":19},{"bytes":608,"dir":1,"interval":0},{"bytes":467,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":58},{"bytes":42,"dir":2,"interval":20},{"bytes":150,"dir":2,"interval":9},{"bytes":31,"dir":1,"interval":40915}],"tls":{"version":"tls1.2","sni":"ta.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51513,"dip":"212.129.151.101","dport":443,"proto":"tcp","c2s_bytes":45920,"s2c_bytes":9248,"c2s_pkts":71,"s2c_pkts":64,"total_pkts":135,"duration":792573591,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":427},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":390,"dir":1,"interval":0},{"bytes":359,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":49},{"bytes":42,"dir":2,"interval":29},{"bytes":150,"dir":2,"interval":1},{"bytes":62,"dir":1,"interval":187},{"bytes":1393,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":157},{"bytes":150,"dir":2,"interval":31},{"bytes":62,"dir":1,"interval":317},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":847,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":287},{"bytes":150,"dir":2,"interval":31},{"bytes":61,"dir":1,"interval":984},{"bytes":550,"dir":1,"interval":2},{"bytes":42,"dir":2,"interval":952},{"bytes":150,"dir":2,"interval":31},{"bytes":62,"dir":1,"interval":1427},{"bytes":425,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1398},{"bytes":150,"dir":2,"interval":30},{"bytes":62,"dir":1,"interval":1040},{"bytes":1369,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1010},{"bytes":150,"dir":2,"interval":31},{"bytes":62,"dir":1,"interval":4837},{"bytes":651,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":4806},{"bytes":150,"dir":2,"interval":31},{"bytes":62,"dir":1,"interval":1026},{"bytes":1440,"dir":1,"interval":0},{"bytes":364,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":996},{"bytes":150,"dir":2,"interval":31},{"bytes":62,"dir":1,"interval":1032},{"bytes":1440,"dir":1,"interval":5},{"bytes":608,"dir":1,"interval":0},{"bytes":224,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1001},{"bytes":150,"dir":2,"interval":31},{"bytes":61,"dir":1,"interval":3858},{"bytes":438,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":3832},{"bytes":150,"dir":2,"interval":30},{"bytes":62,"dir":1,"interval":1036},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":623,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1005},{"bytes":150,"dir":2,"interval":31},{"bytes":62,"dir":1,"interval":985},{"bytes":1440,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":954},{"bytes":150,"dir":2,"interval":34},{"bytes":62,"dir":1,"interval":2183},{"bytes":941,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":2148},{"bytes":150,"dir":2,"interval":32},{"bytes":62,"dir":1,"interval":1033},{"bytes":1440,"dir":1,"interval":0},{"bytes":608,"dir":1,"interval":0},{"bytes":647,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1000},{"bytes":150,"dir":2,"interval":32},{"bytes":62,"dir":1,"interval":1013},{"bytes":1440,"dir":1,"interval":0},{"bytes":437,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":983},{"bytes":150,"dir":2,"interval":31},{"bytes":1440,"dir":1,"interval":1029},{"bytes":241,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":998},{"bytes":150,"dir":2,"interval":31},{"bytes":836,"dir":1,"interval":973},{"bytes":42,"dir":2,"interval":942},{"bytes":150,"dir":2,"interval":32},{"bytes":724,"dir":1,"interval":3171},{"bytes":42,"dir":2,"interval":3139},{"bytes":150,"dir":2,"interval":31},{"bytes":1440,"dir":1,"interval":1054},{"bytes":608,"dir":1,"interval":0},{"bytes":1029,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":1022},{"bytes":150,"dir":2,"interval":31},{"bytes":473,"dir":1,"interval":1030},{"bytes":42,"dir":2,"interval":1000},{"bytes":150,"dir":2,"interval":31},{"bytes":835,"dir":1,"interval":1017},{"bytes":42,"dir":2,"interval":986},{"bytes":150,"dir":2,"interval":31},{"bytes":423,"dir":1,"interval":1462},{"bytes":42,"dir":2,"interval":1431},{"bytes":150,"dir":2,"interval":31},{"bytes":941,"dir":1,"interval":611},{"bytes":42,"dir":2,"interval":578},{"bytes":150,"dir":2,"interval":31},{"bytes":1440,"dir":1,"interval":992},{"bytes":608,"dir":1,"interval":0},{"bytes":41,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":960},{"bytes":150,"dir":2,"interval":31},{"bytes":1440,"dir":1,"interval":1003},{"bytes":445,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":973},{"bytes":150,"dir":2,"interval":31},{"bytes":1150,"dir":1,"interval":976},{"bytes":42,"dir":2,"interval":946},{"bytes":150,"dir":2,"interval":31},{"bytes":1440,"dir":1,"interval":1026},{"bytes":608,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":371,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":995},{"bytes":150,"dir":2,"interval":32},{"bytes":1440,"dir":1,"interval":979},{"bytes":379,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":949},{"bytes":150,"dir":2,"interval":31},{"bytes":1305,"dir":1,"interval":1645},{"bytes":42,"dir":2,"interval":1614},{"bytes":150,"dir":2,"interval":31},{"bytes":995,"dir":1,"interval":1433}],"tls":{"version":"tls1.2","sni":"th.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51406,"dip":"101.226.233.189","dport":443,"proto":"tcp","c2s_bytes":1379,"s2c_bytes":4714,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":792600111,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1183,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":49},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":495},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":546,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":120},{"bytes":42,"dir":2,"interval":45},{"bytes":190,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":72736}],"tls":{"version":"tls1.2","sni":"voreader.reader.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":51545,"dip":"121.51.14.163","dport":443,"proto":"tcp","c2s_bytes":1137,"s2c_bytes":14344,"c2s_pkts":10,"s2c_pkts":18,"total_pkts":28,"duration":792557145,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1349,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":43},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":283},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":240,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":60},{"bytes":1460,"dir":2,"interval":44},{"bytes":1460,"dir":2,"interval":0},{"bytes":627,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":62,"dir":1,"interval":18582},{"bytes":1460,"dir":2,"interval":18540},{"bytes":1460,"dir":2,"interval":0},{"bytes":96,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":251},{"bytes":62,"dir":1,"interval":-3},{"bytes":1460,"dir":2,"interval":331},{"bytes":1460,"dir":2,"interval":0},{"bytes":97,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":11145}],"tls":{"version":"tls1.2","sni":"pinduoduoimg.yangkeduo.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":49767,"dip":"220.194.76.126","dport":443,"proto":"tcp","c2s_bytes":274,"s2c_bytes":5026,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":792396035,"packets":[{"bytes":274,"dir":1,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":246},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":651,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"cdn.wup.huya.com","alpn":"","cipher_suites":["c030","c02c","c028","c024","c014","c00a","00a5","00a3","00a1","009f","006b","006a","0069","0068","0039","0038","0037","0036","0088","0087","0086","0085","c032","c02e","c02a","c026","c00f","c005","c02f","c02b","c027","c023","c013","c009","00a4","00a2","00a0","009e","0067","0040","003f","003e","0033","0032","0031","0030","0045","0044","0043","0042","c031","c02d","c029","c025","c00e","c004"],"extensions_list":[0,11,10,35,13,15]}}
{"sip":"192.168.50.193","sport":49744,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":4919,"s2c_bytes":126000,"c2s_pkts":10,"s2c_pkts":97,"total_pkts":107,"duration":792403534,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":216,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":45,"dir":1,"interval":141},{"bytes":588,"dir":1,"interval":29},{"bytes":1460,"dir":2,"interval":47},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":192,"dir":2,"interval":0},{"bytes":578,"dir":1,"interval":219},{"bytes":1460,"dir":2,"interval":218},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":-1},{"bytes":360,"dir":2,"interval":0},{"bytes":587,"dir":1,"interval":78},{"bytes":1460,"dir":2,"interval":80},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":524,"dir":2,"interval":0},{"bytes":578,"dir":1,"interval":23},{"bytes":1460,"dir":2,"interval":21},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":325,"dir":2,"interval":0},{"bytes":578,"dir":1,"interval":43},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":185,"dir":2,"interval":0},{"bytes":583,"dir":1,"interval":863},{"bytes":1460,"dir":2,"interval":857},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":877,"dir":2,"interval":3},{"bytes":585,"dir":1,"interval":173},{"bytes":1460,"dir":2,"interval":168},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1408,"dir":2,"interval":0},{"bytes":595,"dir":1,"interval":27},{"bytes":1460,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":376,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":64994}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":49742,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":3782,"s2c_bytes":69007,"c2s_pkts":8,"s2c_pkts":54,"total_pkts":62,"duration":792403775,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":216,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":45,"dir":1,"interval":181},{"bytes":587,"dir":1,"interval":10},{"bytes":745,"dir":2,"interval":78},{"bytes":588,"dir":1,"interval":29},{"bytes":1460,"dir":2,"interval":33},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":849,"dir":2,"interval":0},{"bytes":587,"dir":1,"interval":513},{"bytes":1460,"dir":2,"interval":502},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1129,"dir":2,"interval":0},{"bytes":587,"dir":1,"interval":50},{"bytes":1460,"dir":2,"interval":49},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":742,"dir":2,"interval":0},{"bytes":582,"dir":1,"interval":53},{"bytes":1460,"dir":2,"interval":52},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":604,"dir":1,"interval":1002},{"bytes":1460,"dir":2,"interval":1001},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":384,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":64995}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":49743,"dip":"182.254.52.101","dport":443,"proto":"tcp","c2s_bytes":4944,"s2c_bytes":138321,"c2s_pkts":10,"s2c_pkts":104,"total_pkts":114,"duration":792403771,"packets":[{"bytes":202,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":216,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":45,"dir":1,"interval":168},{"bytes":581,"dir":1,"interval":9},{"bytes":1460,"dir":2,"interval":81},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":305,"dir":2,"interval":0},{"bytes":588,"dir":1,"interval":39},{"bytes":1460,"dir":2,"interval":34},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":677,"dir":2,"interval":0},{"bytes":587,"dir":1,"interval":64},{"bytes":1004,"dir":2,"interval":57},{"bytes":582,"dir":1,"interval":447},{"bytes":1460,"dir":2,"interval":448},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1334,"dir":2,"interval":0},{"bytes":582,"dir":1,"interval":50},{"bytes":1460,"dir":2,"interval":50},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":786,"dir":2,"interval":0},{"bytes":578,"dir":1,"interval":54},{"bytes":1460,"dir":2,"interval":51},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1073,"dir":2,"interval":0},{"bytes":595,"dir":1,"interval":999},{"bytes":1460,"dir":2,"interval":999},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":373,"dir":2,"interval":0},{"bytes":604,"dir":1,"interval":22},{"bytes":1460,"dir":2,"interval":22},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":796,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":64995}],"tls":{"version":"tls1.2","sni":"y.gtimg.cn","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":52224,"dip":"211.144.24.241","dport":443,"proto":"tcp","c2s_bytes":5331,"s2c_bytes":5068,"c2s_pkts":12,"s2c_pkts":13,"total_pkts":25,"duration":792172815,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":213},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":980,"dir":1,"interval":1},{"bytes":599,"dir":1,"interval":0},{"bytes":616,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":95},{"bytes":117,"dir":2,"interval":0},{"bytes":117,"dir":2,"interval":4},{"bytes":117,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":71},{"bytes":599,"dir":1,"interval":3482},{"bytes":117,"dir":2,"interval":3549},{"bytes":599,"dir":1,"interval":6827},{"bytes":618,"dir":1,"interval":0},{"bytes":620,"dir":1,"interval":0},{"bytes":117,"dir":2,"interval":6832},{"bytes":117,"dir":2,"interval":4},{"bytes":117,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sh.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52202,"dip":"211.144.24.231","dport":443,"proto":"tcp","c2s_bytes":10875,"s2c_bytes":5239,"c2s_pkts":16,"s2c_pkts":12,"total_pkts":28,"duration":792177626,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":964,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":4},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":2022},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":161,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":673},{"bytes":42,"dir":2,"interval":3},{"bytes":1280,"dir":1,"interval":19},{"bytes":204,"dir":1,"interval":1},{"bytes":288,"dir":2,"interval":19},{"bytes":72,"dir":1,"interval":14},{"bytes":1460,"dir":1,"interval":0},{"bytes":234,"dir":1,"interval":0},{"bytes":42,"dir":2,"interval":12},{"bytes":288,"dir":2,"interval":4},{"bytes":1460,"dir":1,"interval":17068},{"bytes":42,"dir":2,"interval":17064},{"bytes":218,"dir":1,"interval":9},{"bytes":1242,"dir":1,"interval":0},{"bytes":1460,"dir":1,"interval":-10},{"bytes":288,"dir":2,"interval":13},{"bytes":1460,"dir":1,"interval":35947},{"bytes":962,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"ex.m.jd.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52396,"dip":"106.11.208.136","dport":443,"proto":"tcp","c2s_bytes":1539,"s2c_bytes":14288,"c2s_pkts":7,"s2c_pkts":17,"total_pkts":24,"duration":792007707,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":1},{"bytes":1452,"dir":2,"interval":0},{"bytes":337,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1823},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":436,"dir":1,"interval":0},{"bytes":403,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":38},{"bytes":38,"dir":1,"interval":8},{"bytes":263,"dir":2,"interval":29},{"bytes":38,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":156},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":1429,"dir":2,"interval":0},{"bytes":531,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"iyes.youku.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52515,"dip":"106.11.208.136","dport":443,"proto":"tcp","c2s_bytes":1185,"s2c_bytes":10011,"c2s_pkts":6,"s2c_pkts":12,"total_pkts":18,"duration":791945078,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":0},{"bytes":1192,"dir":2,"interval":0},{"bytes":1452,"dir":2,"interval":1},{"bytes":1452,"dir":2,"interval":0},{"bytes":338,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":13},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1085},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":485,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":84},{"bytes":1429,"dir":2,"interval":28},{"bytes":841,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"iyes.youku.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":52410,"dip":"122.14.43.61","dport":443,"proto":"tcp","c2s_bytes":1637,"s2c_bytes":17819,"c2s_pkts":11,"s2c_pkts":21,"total_pkts":32,"duration":792006939,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":570,"dir":2,"interval":0},{"bytes":255,"dir":2,"interval":1},{"bytes":255,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":94},{"bytes":58,"dir":1,"interval":8},{"bytes":46,"dir":1,"interval":0},{"bytes":43,"dir":1,"interval":0},{"bytes":35,"dir":1,"interval":0},{"bytes":174,"dir":1,"interval":0},{"bytes":70,"dir":1,"interval":0},{"bytes":71,"dir":2,"interval":16},{"bytes":1225,"dir":2,"interval":2},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":864,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":1377,"dir":2,"interval":0},{"bytes":31,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":6},{"bytes":70,"dir":1,"interval":2368},{"bytes":684,"dir":2,"interval":2372},{"bytes":31,"dir":2,"interval":0},{"bytes":70,"dir":1,"interval":5944},{"bytes":714,"dir":2,"interval":5944},{"bytes":31,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"dorangesource.alicdn.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53139,"dip":"203.208.50.56","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":3003,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":791826517,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":959,"dir":2,"interval":0},{"bytes":596,"dir":2,"interval":38},{"bytes":523,"dir":1,"interval":3785}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53204,"dip":"203.208.50.56","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":3002,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":791820690,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":958,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":115},{"bytes":596,"dir":2,"interval":37}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53903,"dip":"203.208.39.207","dport":443,"proto":"tcp","c2s_bytes":1040,"s2c_bytes":3001,"c2s_pkts":2,"s2c_pkts":3,"total_pkts":5,"duration":791666609,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":957,"dir":2,"interval":0},{"bytes":523,"dir":1,"interval":3017},{"bytes":596,"dir":2,"interval":38}],"tls":{"version":"tls1.2","sni":"settings.crashlytics.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53573,"dip":"101.71.145.130","dport":443,"proto":"tcp","c2s_bytes":1991,"s2c_bytes":16185,"c2s_pkts":10,"s2c_pkts":23,"total_pkts":33,"duration":791734452,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":350,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":33},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1422},{"bytes":53,"dir":1,"interval":11},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":455,"dir":1,"interval":0},{"bytes":452,"dir":1,"interval":0},{"bytes":132,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":72},{"bytes":1046,"dir":2,"interval":52},{"bytes":326,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":98,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":668,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":136},{"bytes":810,"dir":2,"interval":89},{"bytes":48,"dir":2,"interval":0},{"bytes":1241,"dir":2,"interval":79},{"bytes":1303,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":597,"dir":2,"interval":0},{"bytes":501,"dir":2,"interval":0},{"bytes":48,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gw.m.163.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54021,"dip":"122.14.43.166","dport":443,"proto":"tcp","c2s_bytes":5251,"s2c_bytes":84630,"c2s_pkts":54,"s2c_pkts":115,"total_pkts":169,"duration":791587052,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1261},{"bytes":53,"dir":1,"interval":25},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":188,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":526},{"bytes":38,"dir":1,"interval":2},{"bytes":1460,"dir":2,"interval":4},{"bytes":711,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1097,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1259,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":237,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":13190},{"bytes":92,"dir":1,"interval":0},{"bytes":100,"dir":1,"interval":0},{"bytes":1314,"dir":2,"interval":13189},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":40},{"bytes":1460,"dir":2,"interval":0},{"bytes":435,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1408,"dir":2,"interval":16},{"bytes":38,"dir":2,"interval":0},{"bytes":99,"dir":1,"interval":2994},{"bytes":101,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":2937},{"bytes":1393,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":941,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":91,"dir":1,"interval":56},{"bytes":775,"dir":2,"interval":109},{"bytes":657,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":680},{"bytes":1162,"dir":2,"interval":624},{"bytes":38,"dir":2,"interval":0},{"bytes":91,"dir":1,"interval":1627},{"bytes":101,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1100,"dir":2,"interval":1642},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":1732},{"bytes":1460,"dir":2,"interval":1722},{"bytes":1305,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":32455},{"bytes":100,"dir":1,"interval":3},{"bytes":1460,"dir":2,"interval":32450},{"bytes":1113,"dir":2,"interval":0},{"bytes":556,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":5},{"bytes":1460,"dir":2,"interval":0},{"bytes":804,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":504},{"bytes":1460,"dir":2,"interval":503},{"bytes":830,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":92,"dir":1,"interval":146},{"bytes":1149,"dir":2,"interval":144},{"bytes":268,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":30},{"bytes":1460,"dir":2,"interval":31},{"bytes":586,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":99,"dir":1,"interval":32},{"bytes":1460,"dir":2,"interval":31},{"bytes":1460,"dir":2,"interval":0},{"bytes":73,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":92,"dir":1,"interval":20},{"bytes":1460,"dir":2,"interval":27},{"bytes":1012,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":35},{"bytes":1460,"dir":2,"interval":28},{"bytes":1000,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":100,"dir":1,"interval":112},{"bytes":1460,"dir":2,"interval":119},{"bytes":979,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":51},{"bytes":102,"dir":1,"interval":36},{"bytes":1073,"dir":2,"interval":84},{"bytes":38,"dir":2,"interval":0},{"bytes":799,"dir":2,"interval":13},{"bytes":1460,"dir":2,"interval":0},{"bytes":489,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":147},{"bytes":1460,"dir":2,"interval":130},{"bytes":1259,"dir":2,"interval":0},{"bytes":200,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":101},{"bytes":1344,"dir":2,"interval":108},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":85},{"bytes":1206,"dir":2,"interval":103},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":443},{"bytes":42,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":417},{"bytes":1410,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":412},{"bytes":1460,"dir":2,"interval":414},{"bytes":741,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":835},{"bytes":1460,"dir":2,"interval":834},{"bytes":661,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":101,"dir":1,"interval":1561},{"bytes":83,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":1560},{"bytes":1258,"dir":2,"interval":0},{"bytes":54,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":49},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":1,"interval":562},{"bytes":101,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":513},{"bytes":583,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":42,"dir":1,"interval":528},{"bytes":91,"dir":1,"interval":-305},{"bytes":102,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":305},{"bytes":92,"dir":1,"interval":0},{"bytes":1321,"dir":2,"interval":569},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1223,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1007,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":23},{"bytes":1016,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":23397}],"tls":{"version":"tls1.2","sni":"i1.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54097,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":1015,"s2c_bytes":6099,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":791569559,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":497},{"bytes":53,"dir":1,"interval":5},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":158,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":24},{"bytes":1460,"dir":2,"interval":2},{"bytes":921,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":65069}],"tls":{"version":"tls1.2","sni":"w1.hoopchina.com.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":53902,"dip":"122.14.43.169","dport":443,"proto":"tcp","c2s_bytes":15976,"s2c_bytes":11934,"c2s_pkts":28,"s2c_pkts":30,"total_pkts":58,"duration":791669027,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":168,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":1017},{"bytes":53,"dir":1,"interval":1046},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":2020},{"bytes":1460,"dir":1,"interval":5},{"bytes":1460,"dir":1,"interval":0},{"bytes":1062,"dir":1,"interval":10},{"bytes":38,"dir":1,"interval":0},{"bytes":747,"dir":2,"interval":47},{"bytes":38,"dir":2,"interval":0},{"bytes":601,"dir":2,"interval":38},{"bytes":38,"dir":2,"interval":0},{"bytes":1031,"dir":2,"interval":3},{"bytes":38,"dir":2,"interval":0},{"bytes":499,"dir":1,"interval":81},{"bytes":453,"dir":1,"interval":0},{"bytes":684,"dir":1,"interval":0},{"bytes":453,"dir":1,"interval":12},{"bytes":684,"dir":1,"interval":0},{"bytes":377,"dir":2,"interval":41},{"bytes":38,"dir":2,"interval":0},{"bytes":862,"dir":2,"interval":11},{"bytes":38,"dir":2,"interval":0},{"bytes":870,"dir":2,"interval":15},{"bytes":38,"dir":2,"interval":0},{"bytes":454,"dir":1,"interval":73},{"bytes":684,"dir":1,"interval":0},{"bytes":450,"dir":1,"interval":7},{"bytes":844,"dir":1,"interval":6},{"bytes":454,"dir":1,"interval":12},{"bytes":684,"dir":1,"interval":0},{"bytes":491,"dir":2,"interval":71},{"bytes":38,"dir":2,"interval":0},{"bytes":946,"dir":2,"interval":11},{"bytes":38,"dir":2,"interval":0},{"bytes":980,"dir":2,"interval":35},{"bytes":38,"dir":2,"interval":0},{"bytes":450,"dir":1,"interval":60022},{"bytes":972,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":60029},{"bytes":38,"dir":2,"interval":0},{"bytes":450,"dir":1,"interval":61316},{"bytes":1200,"dir":1,"interval":0},{"bytes":92,"dir":1,"interval":0},{"bytes":382,"dir":2,"interval":61328},{"bytes":38,"dir":2,"interval":0},{"bytes":450,"dir":1,"interval":21299},{"bytes":1180,"dir":1,"interval":0},{"bytes":371,"dir":2,"interval":21286},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":20130}],"tls":{"version":"tls1.2","sni":"toblog.ctobsnssdk.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54104,"dip":"121.41.48.9","dport":443,"proto":"tcp","c2s_bytes":24353,"s2c_bytes":8327,"c2s_pkts":44,"s2c_pkts":28,"total_pkts":72,"duration":791547551,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":411,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":29},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":110},{"bytes":53,"dir":1,"interval":8},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":302,"dir":1,"interval":2},{"bytes":1440,"dir":1,"interval":0},{"bytes":196,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":86},{"bytes":1440,"dir":1,"interval":28},{"bytes":260,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":61},{"bytes":38,"dir":2,"interval":0},{"bytes":1440,"dir":1,"interval":1985},{"bytes":526,"dir":1,"interval":6},{"bytes":383,"dir":2,"interval":2002},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":13115},{"bytes":1200,"dir":1,"interval":0},{"bytes":848,"dir":1,"interval":0},{"bytes":1046,"dir":1,"interval":4},{"bytes":383,"dir":2,"interval":13109},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":71},{"bytes":1200,"dir":1,"interval":0},{"bytes":130,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":144},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":938},{"bytes":1200,"dir":1,"interval":0},{"bytes":848,"dir":1,"interval":0},{"bytes":506,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":865},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":112},{"bytes":1200,"dir":1,"interval":0},{"bytes":398,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":112},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":259},{"bytes":1200,"dir":1,"interval":0},{"bytes":126,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":309},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":1730},{"bytes":1200,"dir":1,"interval":0},{"bytes":848,"dir":1,"interval":0},{"bytes":358,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":1681},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":73},{"bytes":1200,"dir":1,"interval":2},{"bytes":130,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":143},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":1718},{"bytes":1200,"dir":1,"interval":0},{"bytes":848,"dir":1,"interval":0},{"bytes":378,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":1651},{"bytes":38,"dir":2,"interval":0},{"bytes":60,"dir":1,"interval":1356},{"bytes":1200,"dir":1,"interval":0},{"bytes":126,"dir":1,"interval":0},{"bytes":383,"dir":2,"interval":1404},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":22041}],"tls":{"version":"tls1.2","sni":"hermes.hupu.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54328,"dip":"17.248.161.14","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":7,"c2s_pkts":1,"s2c_pkts":1,"total_pkts":2,"duration":791401838,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54543,"dip":"17.248.161.140","dport":443,"proto":"tcp","c2s_bytes":195,"s2c_bytes":7,"c2s_pkts":1,"s2c_pkts":1,"total_pkts":2,"duration":791110589,"packets":[{"bytes":195,"dir":1,"interval":0},{"bytes":7,"dir":2,"interval":0}],"tls":{"version":"tls1.0","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c00a","c009","c014","c013","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,5,18,16,11,10]}}
{"sip":"192.168.50.193","sport":54576,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":1629,"s2c_bytes":6795,"c2s_pkts":15,"s2c_pkts":9,"total_pkts":24,"duration":791073743,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":326,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":23},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":137},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":177,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":3},{"bytes":38,"dir":2,"interval":60},{"bytes":449,"dir":2,"interval":4},{"bytes":116,"dir":1,"interval":14988},{"bytes":1275,"dir":2,"interval":14987},{"bytes":103,"dir":1,"interval":1037},{"bytes":82,"dir":1,"interval":3},{"bytes":140,"dir":1,"interval":4039},{"bytes":42,"dir":1,"interval":5018},{"bytes":82,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":219},{"bytes":103,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":6045}],"tls":{"version":"tls1.2","sni":"imgcache.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54569,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":850,"s2c_bytes":5653,"c2s_pkts":6,"s2c_pkts":8,"total_pkts":14,"duration":791075512,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":1},{"bytes":27,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1727},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":150,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":60},{"bytes":881,"dir":2,"interval":4}],"tls":{"version":"tls1.2","sni":"cmshow.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54813,"dip":"182.254.59.170","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4393,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":790980098,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":13,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"182.254.59.170","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54664,"dip":"182.254.48.229","dport":443,"proto":"tcp","c2s_bytes":4163,"s2c_bytes":58758,"c2s_pkts":25,"s2c_pkts":45,"total_pkts":70,"duration":791034923,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":225,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":6},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1088},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":173,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":42},{"bytes":855,"dir":2,"interval":7},{"bytes":102,"dir":1,"interval":6332},{"bytes":1041,"dir":2,"interval":6327},{"bytes":90,"dir":1,"interval":301},{"bytes":1460,"dir":2,"interval":301},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":921,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":4},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1331,"dir":2,"interval":0},{"bytes":103,"dir":1,"interval":2070},{"bytes":102,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":10697},{"bytes":536,"dir":1,"interval":3525},{"bytes":75,"dir":1,"interval":2942},{"bytes":42,"dir":1,"interval":3039},{"bytes":103,"dir":1,"interval":692},{"bytes":42,"dir":1,"interval":2528},{"bytes":102,"dir":1,"interval":15},{"bytes":42,"dir":1,"interval":7695},{"bytes":75,"dir":1,"interval":48},{"bytes":103,"dir":1,"interval":2421},{"bytes":42,"dir":1,"interval":605},{"bytes":102,"dir":1,"interval":108},{"bytes":42,"dir":1,"interval":7497},{"bytes":97,"dir":1,"interval":0},{"bytes":1448,"dir":1,"interval":6139}],"tls":{"version":"tls1.2","sni":"imgcache.gtimg.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54903,"dip":"125.39.171.24","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790950555,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"125.39.171.24","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54915,"dip":"183.3.234.190","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4144,"c2s_pkts":1,"s2c_pkts":3,"total_pkts":4,"duration":790937119,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1264,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"wuji.video.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54985,"dip":"182.254.50.17","dport":443,"proto":"tcp","c2s_bytes":4025,"s2c_bytes":5361,"c2s_pkts":14,"s2c_pkts":22,"total_pkts":36,"duration":790853481,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":996,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":5},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":1564},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":668,"dir":1,"interval":0},{"bytes":377,"dir":1,"interval":1},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":16},{"bytes":102,"dir":2,"interval":6},{"bytes":38,"dir":2,"interval":0},{"bytes":102,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":378,"dir":1,"interval":8742},{"bytes":102,"dir":2,"interval":8738},{"bytes":38,"dir":2,"interval":0},{"bytes":378,"dir":1,"interval":5339},{"bytes":102,"dir":2,"interval":5341},{"bytes":38,"dir":2,"interval":0},{"bytes":377,"dir":1,"interval":5346},{"bytes":102,"dir":2,"interval":5345},{"bytes":38,"dir":2,"interval":0},{"bytes":358,"dir":1,"interval":5331},{"bytes":102,"dir":2,"interval":5331},{"bytes":38,"dir":2,"interval":0},{"bytes":380,"dir":1,"interval":5325},{"bytes":102,"dir":2,"interval":5325},{"bytes":38,"dir":2,"interval":0},{"bytes":378,"dir":1,"interval":5320},{"bytes":102,"dir":2,"interval":5320},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":21481}],"tls":{"version":"tls1.2","sni":"btrace.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54919,"dip":"183.3.225.108","dport":443,"proto":"tcp","c2s_bytes":1799,"s2c_bytes":4870,"c2s_pkts":4,"s2c_pkts":9,"total_pkts":13,"duration":790937119,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1436,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":39},{"bytes":69,"dir":2,"interval":0},{"bytes":1213,"dir":1,"interval":849},{"bytes":38,"dir":1,"interval":-9},{"bytes":38,"dir":2,"interval":196},{"bytes":42,"dir":2,"interval":39},{"bytes":109,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":141247}],"tls":{"version":"tls1.2","sni":"szmg.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":54950,"dip":"101.226.233.189","dport":443,"proto":"tcp","c2s_bytes":1379,"s2c_bytes":4714,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":790910663,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1183,"dir":2,"interval":0},{"bytes":274,"dir":2,"interval":60},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":415},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":546,"dir":1,"interval":0},{"bytes":102,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":2},{"bytes":38,"dir":2,"interval":106},{"bytes":42,"dir":2,"interval":57},{"bytes":190,"dir":2,"interval":2},{"bytes":38,"dir":2,"interval":0},{"bytes":31,"dir":1,"interval":115214}],"tls":{"version":"tls1.2","sni":"voreader.reader.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55081,"dip":"101.226.233.189","dport":443,"proto":"tcp","c2s_bytes":1438,"s2c_bytes":4519,"c2s_pkts":8,"s2c_pkts":9,"total_pkts":17,"duration":790790339,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1211,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":334},{"bytes":51,"dir":2,"interval":330},{"bytes":69,"dir":2,"interval":0},{"bytes":53,"dir":1,"interval":285},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":545,"dir":1,"interval":0},{"bytes":67,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":289},{"bytes":42,"dir":2,"interval":0},{"bytes":190,"dir":2,"interval":1},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"voreader.reader.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55234,"dip":"17.248.159.175","dport":443,"proto":"tcp","c2s_bytes":2147,"s2c_bytes":5451,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":790759969,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":584,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":600,"dir":2,"interval":0},{"bytes":755,"dir":2,"interval":0},{"bytes":93,"dir":1,"interval":192},{"bytes":120,"dir":2,"interval":142},{"bytes":53,"dir":1,"interval":133},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":887,"dir":1,"interval":0},{"bytes":467,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":57},{"bytes":38,"dir":2,"interval":141},{"bytes":458,"dir":2,"interval":108}],"tls":{"version":"tls1.2","sni":"gateway.icloud.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a","009f","009e","006b","0067","0039","0033","0016"],"extensions_list":[65281,0,23,13,5,18,16,11,10,21]}}
{"sip":"192.168.50.193","sport":55262,"dip":"203.187.160.135","dport":443,"proto":"tcp","c2s_bytes":798,"s2c_bytes":4580,"c2s_pkts":2,"s2c_pkts":4,"total_pkts":6,"duration":790667044,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1353,"dir":2,"interval":0},{"bytes":331,"dir":2,"interval":7},{"bytes":281,"dir":1,"interval":938}],"tls":{"version":"tls1.2","sni":"puui.qpic.cn","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55271,"dip":"122.14.43.168","dport":443,"proto":"tcp","c2s_bytes":1973,"s2c_bytes":5134,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":790665738,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":283,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":126,"dir":1,"interval":292},{"bytes":449,"dir":1,"interval":15},{"bytes":881,"dir":1,"interval":66},{"bytes":370,"dir":2,"interval":169},{"bytes":1285,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"rtbapi.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":61975,"dip":"111.30.159.239","dport":443,"proto":"tcp","c2s_bytes":174,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790666586,"packets":[{"bytes":174,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"lives.l.qq.com","alpn":"","cipher_suites":["c02c","c02b","c024","c023","c00a","c009","c008","c030","c02f","c028","c027","c014","c013","c012","009d","009c","003d","003c","0035","002f","000a"],"extensions_list":[0,10,11,13,5,18,23]}}
{"sip":"192.168.50.193","sport":55270,"dip":"203.187.160.135","dport":443,"proto":"tcp","c2s_bytes":810,"s2c_bytes":27567,"c2s_pkts":2,"s2c_pkts":22,"total_pkts":24,"duration":790666097,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1338,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":7},{"bytes":293,"dir":1,"interval":1353},{"bytes":1448,"dir":2,"interval":731},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":96,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":413,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":3},{"bytes":1448,"dir":2,"interval":0},{"bytes":846,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"puui.qpic.cn","alpn":"","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55272,"dip":"122.14.43.167","dport":443,"proto":"tcp","c2s_bytes":1041,"s2c_bytes":151993,"c2s_pkts":8,"s2c_pkts":110,"total_pkts":118,"duration":790665151,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":277,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":282},{"bytes":53,"dir":1,"interval":61},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":173,"dir":1,"interval":1},{"bytes":38,"dir":2,"interval":113},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":628,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":62},{"bytes":42,"dir":1,"interval":65},{"bytes":1460,"dir":2,"interval":120},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":353,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1096,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1282,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":548,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"sta-op.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55273,"dip":"123.103.23.206","dport":443,"proto":"tcp","c2s_bytes":1460,"s2c_bytes":5518,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":790664743,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":1448,"dir":2,"interval":0},{"bytes":952,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":331,"dir":1,"interval":208},{"bytes":612,"dir":1,"interval":0},{"bytes":1412,"dir":2,"interval":128}],"tls":{"version":"tls1.2","sni":"base.micro.server.matocloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55274,"dip":"114.113.88.71","dport":443,"proto":"tcp","c2s_bytes":1092,"s2c_bytes":4339,"c2s_pkts":8,"s2c_pkts":8,"total_pkts":16,"duration":790664713,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":277,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":205},{"bytes":53,"dir":1,"interval":39},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":172,"dir":1,"interval":0},{"bytes":94,"dir":1,"interval":0},{"bytes":38,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":95},{"bytes":739,"dir":2,"interval":5},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"venus.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55277,"dip":"122.14.43.27","dport":443,"proto":"tcp","c2s_bytes":1474,"s2c_bytes":4159,"c2s_pkts":4,"s2c_pkts":7,"total_pkts":11,"duration":790664676,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":283,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":10},{"bytes":126,"dir":1,"interval":187},{"bytes":620,"dir":1,"interval":20},{"bytes":211,"dir":1,"interval":0},{"bytes":427,"dir":2,"interval":150},{"bytes":253,"dir":2,"interval":0},{"bytes":34,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"apiv3.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55278,"dip":"123.103.23.206","dport":443,"proto":"tcp","c2s_bytes":1493,"s2c_bytes":4946,"c2s_pkts":3,"s2c_pkts":5,"total_pkts":8,"duration":790664411,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":928,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":3},{"bytes":311,"dir":1,"interval":236},{"bytes":665,"dir":1,"interval":14},{"bytes":840,"dir":2,"interval":211}],"tls":{"version":"tls1.2","sni":"micro.server.matocloud.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55279,"dip":"111.206.4.97","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790664180,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"apiv2.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55280,"dip":"180.163.26.100","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4442,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":790664083,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1304,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":41}],"tls":{"version":"tls1.2","sni":"ios.bugly.qq.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55281,"dip":"203.119.207.252","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":8810,"c2s_pkts":1,"s2c_pkts":9,"total_pkts":10,"duration":790663841,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1216,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1440,"dir":2,"interval":0},{"bytes":1342,"dir":2,"interval":0},{"bytes":161,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":8},{"bytes":73,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"ulogs.umeng.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55285,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663640,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"client-api.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55289,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663608,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55287,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663608,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55288,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663604,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55291,"dip":"123.244.38.204","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663595,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"init.itunes.apple.com","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55282,"dip":"180.163.25.229","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":4925,"c2s_pkts":1,"s2c_pkts":6,"total_pkts":7,"duration":790663777,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":1360,"dir":2,"interval":0},{"bytes":16,"dir":2,"interval":0},{"bytes":555,"dir":2,"interval":28},{"bytes":274,"dir":2,"interval":29}],"tls":{"version":"tls1.2","sni":"configsvr.openmsf.3g.qq.com","alpn":"\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55275,"dip":"114.113.88.71","dport":443,"proto":"tcp","c2s_bytes":1504,"s2c_bytes":43138,"c2s_pkts":9,"s2c_pkts":38,"total_pkts":47,"duration":790664687,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":277,"dir":2,"interval":0},{"bytes":258,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0},{"bytes":126,"dir":1,"interval":217},{"bytes":53,"dir":1,"interval":28},{"bytes":50,"dir":1,"interval":0},{"bytes":42,"dir":1,"interval":0},{"bytes":362,"dir":1,"interval":0},{"bytes":38,"dir":2,"interval":83},{"bytes":1460,"dir":2,"interval":3},{"bytes":1460,"dir":2,"interval":0},{"bytes":704,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0},{"bytes":38,"dir":1,"interval":13},{"bytes":181,"dir":1,"interval":36},{"bytes":1460,"dir":2,"interval":52},{"bytes":1460,"dir":2,"interval":0},{"bytes":1139,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":922,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":922,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":646,"dir":2,"interval":0},{"bytes":135,"dir":1,"interval":823},{"bytes":1460,"dir":2,"interval":818},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":856,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":731,"dir":2,"interval":0},{"bytes":38,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"venus.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55283,"dip":"122.14.43.170","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3445,"c2s_pkts":1,"s2c_pkts":4,"total_pkts":5,"duration":790663638,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":283,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2}],"tls":{"version":"tls1.2","sni":"gift.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55284,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663374,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"gfs-op.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55286,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3508,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":790663374,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":277,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gfs-op.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55290,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663221,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"gfs-op.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55292,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663164,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"gfs-op.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55293,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":3508,"c2s_pkts":1,"s2c_pkts":5,"total_pkts":6,"duration":790663164,"packets":[{"bytes":517,"dir":1,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":1460,"dir":2,"interval":0},{"bytes":277,"dir":2,"interval":0},{"bytes":242,"dir":2,"interval":2},{"bytes":69,"dir":2,"interval":0}],"tls":{"version":"tls1.2","sni":"gfs-op.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55294,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663098,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"gfs-op.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
{"sip":"192.168.50.193","sport":55295,"dip":"122.14.43.125","dport":443,"proto":"tcp","c2s_bytes":517,"s2c_bytes":0,"c2s_pkts":1,"s2c_pkts":0,"total_pkts":1,"duration":790663097,"packets":[{"bytes":517,"dir":1,"interval":0}],"tls":{"version":"tls1.2","sni":"gfs-op.douyucdn.cn","alpn":"\u0002h2\u0005h2-16\u0005h2-15\u0005h2-14\bspdy/3.1\u0006spdy/3\bhttp/1.1","cipher_suites":["1303","1301","1302","c02c","c02b","c024","c023","c00a","c009","c030","c02f","c028","c027","c014","c013","009d","009c","003d","003c","0035","002f","c008","c012","000a"],"extensions_list":[65281,0,23,13,5,18,16,11,51,45,43,10,21]}}
Reference in New Issue View Git Blame Copy Permalink