{
    "common_recv_time": "1679071721",
    "common_log_id": "1237965967082913842",
    "common_stream_trace_id": "6066368571669956803",
    "common_direction": "69",
    "common_stream_dir": "2",
    "common_start_time": "1679071686",
    "common_end_time": "1679071721",
    "common_con_duration_ms": "35330",
    "common_establish_latency_ms": "1792",
    "common_processing_time": "1679071721",
    "common_ingestion_time": "1679071721",
    "common_entrance_id": "0",
    "common_device_id": "21820003",
    "common_egress_link_id": null,
    "common_ingress_link_id": null,
    "common_isp": "",
    "common_data_center": "",
    "common_sled_ip": "10.217.11.6",
    "common_device_group": "KLT-IGW",
    "common_app_behavior": "",
    "common_action": "0",
    "common_sub_action": "",
    "common_policy_id": "0",
    "common_user_tags": "",
    "common_user_region": "",
    "common_client_ip": "102.218.51.6",
    "common_internal_ip": "102.218.51.6",
    "common_client_port": "43106",
    "common_client_location": "",
    "common_client_asn": "",
    "common_subscriber_id": "",
    "common_imei": "",
    "common_imsi": "",
    "common_phone_number": "",
    "common_server_ip": "217.182.198.219",
    "common_external_ip": "217.182.198.219",
    "common_server_port": "5001",
    "common_server_location": "France.Other.Other",
    "common_server_asn": "16276",
    "common_app_id": "{\"USER_DEFINE\":[{\"app_name\":\"Psiphon3_Slok_IP_APP\",\"app_id\":15101,\"surrogate_id\":7987,\"packet_sequence\":2}]}",
    "common_userdefine_app_name": "[\"Psiphon3_Slok_IP_APP\"]",
    "common_app_identify_info": "[{\"app_name\":\"Psiphon3_Slok_IP_APP\",\"packet_sequence\":2}]",
    "common_app_label": "Psiphon3_Slok_IP_APP",
    "common_app_surrogate_id": "",
    "common_l7_protocol": "UNCATEGORIZED",
    "common_protocol_label": "ETHERNET.MPLS.IPv4.TCP",
    "common_service_category": [],
    "common_service": "0",
    "common_l4_protocol": "IPv4_TCP",
    "common_sessions": "1",
    "common_c2s_pkt_num": "0",
    "common_s2c_pkt_num": "6",
    "common_c2s_pkt_diff": "0",
    "common_s2c_pkt_diff": "6",
    "common_c2s_byte_num": "-50",
    "common_s2c_byte_num": "4782",
    "common_c2s_byte_diff": "-50",
    "common_s2c_byte_diff": "4782",
    "common_c2s_ipfrag_num": "0",
    "common_s2c_ipfrag_num": "0",
    "common_c2s_tcp_lostlen": "0",
    "common_s2c_tcp_lostlen": "0",
    "common_c2s_tcp_unorder_num": "0",
    "common_s2c_tcp_unorder_num": "0",
    "common_c2s_pkt_retrans": "0",
    "common_s2c_pkt_retrans": "0",
    "common_c2s_byte_retrans": "0",
    "common_s2c_byte_retrans": "0",
    "common_first_ttl": "0",
    "common_tcp_client_isn": "0",
    "common_tcp_server_isn": "3488994597",
    "common_mirrored_pkts": "0",
    "common_mirrored_bytes": "0",
    "common_address_type": "4",
    "common_schema_type": "BASE",
    "common_device_tag": "{\"tags\":[{\"tag\":\"device_group\",\"value\":\"KLT-IGW\"}]}",
    "common_encapsulation": "0",
    "common_tunnels": "[{\"tunnels_schema_type\":\"MPLS\",\"mpls_c2s_direction_label\":[60007,524286],\"mpls_s2c_direction_label\":[60003,524275]},{\"tunnels_schema_type\":\"MULTIPATH_ETHERNET\",\"c2s_source_mac\":\"20:f4:4f:99:95:63\",\"c2s_destination_mac\":\"20:f4:4f:e0:a9:65\",\"s2c_source_mac\":\"20:f4:4f:e0:ae:bd\",\"s2c_destination_mac\":\"20:f4:4f:99:b5:bb\"}]",
    "common_address_list": "",
    "common_has_dup_traffic": "0",
    "common_stream_error": "",
    "common_link_info_c2s": "",
    "common_link_info_s2c": "",
    "common_packet_capture_file": "",
    "http_url": "",
    "http_host": "",
    "http_domain": "",
    "http_request_line": "",
    "http_response_line": "",
    "http_request_header": "",
    "http_response_header": "",
    "http_request_content": "",
    "http_response_content": "",
    "http_request_body": "",
    "http_response_body": "",
    "http_request_body_key": "",
    "http_response_body_key": "",
    "http_proxy_flag": "0",
    "http_sequence": "0",
    "http_snapshot": "",
    "http_cookie": "",
    "http_referer": "",
    "http_user_agent": "",
    "http_request_content_length": "",
    "http_request_content_type": "",
    "http_response_content_length": "",
    "http_response_content_type": "",
    "http_content_length": "",
    "http_content_type": "",
    "http_set_cookie": "",
    "http_version": "",
    "http_response_latency_ms": "0",
    "http_session_duration_ms": "0",
    "http_action_file_size": "0",
    "mail_protocol_type": "",
    "mail_account": "",
    "mail_to_cmd": "",
    "mail_from_cmd": "",
    "mail_from": "",
    "mail_to": "",
    "mail_cc": "",
    "mail_bcc": "",
    "mail_subject": "",
    "mail_subject_charset": "",
    "mail_content": "",
    "mail_content_charset": "",
    "mail_attachment_name": "",
    "mail_attachment_name_charset": "",
    "mail_attachment_content": "",
    "mail_eml_file": "",
    "mail_snapshot": "",
    "dns_message_id": "0",
    "dns_qr": null,
    "dns_opcode": null,
    "dns_aa": "0",
    "dns_tc": "0",
    "dns_rd": "0",
    "dns_ra": "0",
    "dns_rcode": "0",
    "dns_qdcount": "0",
    "dns_ancount": "0",
    "dns_nscount": "0",
    "dns_arcount": "0",
    "dns_qname": "",
    "dns_qtype": "0",
    "dns_qclass": "0",
    "dns_cname": "",
    "dns_sub": "0",
    "dns_rr": "",
    "dns_response_latency_ms": "0",
    "ssl_version": "",
    "ssl_sni": "",
    "ssl_san": "",
    "ssl_cn": "",
    "ssl_pinningst": null,
    "ssl_intercept_state": null,
    "ssl_passthrough_reason": "",
    "ssl_server_side_latency": null,
    "ssl_client_side_latency": null,
    "ssl_server_side_version": "",
    "ssl_client_side_version": "",
    "ssl_cert_verify": null,
    "ssl_error": "",
    "ssl_con_latency_ms": "0",
    "ssl_ja3_fingerprint": "",
    "ssl_ja3_hash": "",
    "ssl_cert_issuer": "",
    "ssl_cert_subject": "",
    "quic_version": "",
    "quic_sni": "",
    "quic_user_agent": "",
    "ftp_account": "",
    "ftp_url": "",
    "ftp_content": "",
    "ftp_link_type": "",
    "bgp_type": "0",
    "bgp_as_num": "",
    "bgp_route": "",
    "voip_calling_account": "",
    "voip_called_account": "",
    "voip_calling_number": "",
    "voip_called_number": "",
    "streaming_media_url": "",
    "streaming_media_protocol": "",
    "app_extra_info": "",
    "rdp_cookie": "",
    "rdp_security_protocol": "",
    "rdp_client_channels": "",
    "rdp_keyboard_layout": "",
    "rdp_client_version": "",
    "rdp_client_name": "",
    "rdp_client_product_id": "",
    "rdp_desktop_width": "",
    "rdp_desktop_height": "",
    "rdp_requested_color_depth": "",
    "rdp_certificate_type": "",
    "rdp_certificate_count": "0",
    "rdp_certificate_permanent": "0",
    "rdp_encryption_level": "",
    "rdp_encryption_method": "",
    "sip_call_id": "",
    "sip_originator_description": "",
    "sip_responder_description": "",
    "sip_user_agent": "",
    "sip_server": "",
    "sip_originator_sdp_connect_ip": "",
    "sip_originator_sdp_media_port": "0",
    "sip_originator_sdp_media_type": "",
    "sip_originator_sdp_content": "",
    "sip_responder_sdp_connect_ip": "",
    "sip_responder_sdp_media_port": "0",
    "sip_responder_sdp_media_type": "",
    "sip_responder_sdp_content": "",
    "sip_duration_s": "0",
    "sip_bye": "",
    "rtp_payload_type_c2s": null,
    "rtp_payload_type_s2c": null,
    "rtp_pcap_path": "",
    "rtp_originator_dir": "0",
    "ssh_version": "",
    "ssh_auth_success": "",
    "ssh_client_version": "",
    "ssh_server_version": "",
    "ssh_cipher_alg": "",
    "ssh_kex_alg": "",
    "ssh_host_key_alg": "",
    "ssh_host_key": "",
    "ssh_mac_alg": "",
    "ssh_compression_alg": "",
    "ssh_hassh": "",
    "stratum_cryptocurrency": "",
    "stratum_mining_pools": "",
    "stratum_mining_program": ""
}