['flow', 'http', 'fileinfo', 'http', 'fileinfo', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'fileinfo', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'fileinfo', 'http', 'fileinfo', 'http', 'fileinfo', 'http', 'fileinfo', 'http', 'fileinfo']
src_ip: 192.168.10.25, src_port: 53954, dest_ip: 14.0.67.51, dest_port: 80, event_type: flow, proto: TCP, app_proto: http, flow_pkts_toserver: 111, flow_pkts_toclient: 123, flow_bytes_toserver: 30981, flow_bytes_toclient: 83131, flow_age: 40, flow_state: closed, flow_reason: timeout, tcp_tcp_flags: 1f, tcp_tcp_flags_ts: 1b, tcp_tcp_flags_tc: 1f, tcp_syn: True, tcp_fin: True, tcp_rst: True, tcp_psh: True, tcp_ack: True, tcp_state: closed ; pcap_cnt: 9926026, event_type: http, proto: TCP, tx_id: 0, http_hostname: img.danawa.com, http_url: /new/danawa_main/v2/img/bg_header.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 16087 ; pcap_cnt: 9926028, event_type: fileinfo, proto: TCP, http_hostname: img.danawa.com, http_url: /new/danawa_main/v2/img/bg_header.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 16087, app_proto: http, fileinfo_filename: /new/danawa_main/v2/img/bg_header.png, fileinfo_gaps: True, fileinfo_state: TRUNCATED, fileinfo_stored: False, fileinfo_size: 16087, fileinfo_tx_id: 0 ; pcap_cnt: 9926181, event_type: http, proto: TCP, tx_id: 1, http_hostname: img.danawa.com, http_url: /new/danawa_main/v2/img/bg_header_new.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 11966 ; pcap_cnt: 9926251, event_type: fileinfo, proto: TCP, http_hostname: img.danawa.com, http_url: /new/danawa_main/v2/img/bg_header_new.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 11966, app_proto: http, fileinfo_filename: /new/danawa_main/v2/img/bg_header_new.png, fileinfo_gaps: True, fileinfo_state: TRUNCATED, fileinfo_stored: False, fileinfo_size: 11966, fileinfo_tx_id: 1 ; pcap_cnt: 9926254, event_type: http, proto: TCP, tx_id: 2, http_hostname: img.danawa.com, http_url: /images/attachFiles/4/412/3411467_19.jpeg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9926364, event_type: http, proto: TCP, tx_id: 3, http_hostname: img.danawa.com, http_url: /images/attachFiles/4/411/3410968_19.jpeg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9926467, event_type: http, proto: TCP, tx_id: 4, http_hostname: img.danawa.com, http_url: /images/attachFiles/4/411/3410852_19.jpeg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9926576, event_type: http, proto: TCP, tx_id: 5, http_hostname: img.danawa.com, http_url: /images/attachFiles/4/410/3409137_19.jpeg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9926629, event_type: http, proto: TCP, tx_id: 6, http_hostname: img.danawa.com, http_url: /images/attachFiles/4/410/3409769_19.jpeg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9926677, event_type: http, proto: TCP, tx_id: 7, http_hostname: img.danawa.com, http_url: /images/attachFiles/4/409/3408927_19.jpeg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9926729, event_type: http, proto: TCP, tx_id: 8, http_hostname: img.danawa.com, http_url: /images/attachFiles/4/403/3402570_19.jpeg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9926823, event_type: http, proto: TCP, tx_id: 9, http_hostname: img.danawa.com, http_url: /images/attachFiles/4/411/3410617_19.jpeg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9926934, event_type: http, proto: TCP, tx_id: 10, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1498812890.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927086, event_type: http, proto: TCP, tx_id: 11, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499162019.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927132, event_type: http, proto: TCP, tx_id: 12, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499150105.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927176, event_type: http, proto: TCP, tx_id: 13, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499391514.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927226, event_type: http, proto: TCP, tx_id: 14, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499332236.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927260, event_type: http, proto: TCP, tx_id: 15, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499224421.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927306, event_type: http, proto: TCP, tx_id: 16, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499073522.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927344, event_type: http, proto: TCP, tx_id: 17, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499388411.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927393, event_type: http, proto: TCP, tx_id: 18, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499246255.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927431, event_type: http, proto: TCP, tx_id: 19, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499040892.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927454, event_type: http, proto: TCP, tx_id: 20, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1498724005.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927477, event_type: http, proto: TCP, tx_id: 21, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1498698041.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927504, event_type: http, proto: TCP, tx_id: 22, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1498698373.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927527, event_type: http, proto: TCP, tx_id: 23, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499389616.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927548, event_type: http, proto: TCP, tx_id: 24, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499388209.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927565, event_type: http, proto: TCP, tx_id: 25, http_hostname: img.danawa.com, http_url: /new/danawa_main/v1/img/bg_main_spline.gif, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/gif, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 1115 ; pcap_cnt: 9927578, event_type: fileinfo, proto: TCP, http_hostname: img.danawa.com, http_url: /new/danawa_main/v1/img/bg_main_spline.gif, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/gif, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 1115, app_proto: http, fileinfo_filename: /new/danawa_main/v1/img/bg_main_spline.gif, fileinfo_gaps: False, fileinfo_state: CLOSED, fileinfo_stored: False, fileinfo_size: 1115, fileinfo_tx_id: 25 ; pcap_cnt: 9927582, event_type: http, proto: TCP, tx_id: 26, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499410179.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927600, event_type: http, proto: TCP, tx_id: 27, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499405602.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927619, event_type: http, proto: TCP, tx_id: 28, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499406356.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927640, event_type: http, proto: TCP, tx_id: 29, http_hostname: img.danawa.com, http_url: /totalMain/contentTempImage/1499406680.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927658, event_type: http, proto: TCP, tx_id: 30, http_hostname: img.danawa.com, http_url: /prod_img/500000/140/439/img/4439140_1_160.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927674, event_type: http, proto: TCP, tx_id: 31, http_hostname: img.danawa.com, http_url: /prod_img/500000/276/298/img/5298276_1_160.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927693, event_type: http, proto: TCP, tx_id: 32, http_hostname: img.danawa.com, http_url: /prod_img/500000/327/219/img/5219327_1_160.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927731, event_type: http, proto: TCP, tx_id: 33, http_hostname: img.danawa.com, http_url: /prod_img/500000/736/295/img/5295736_1_160.jpg, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 304, http_length: 0 ; pcap_cnt: 9927769, event_type: http, proto: TCP, tx_id: 34, http_hostname: img.danawa.com, http_url: /new/danawa_main/v2/img/bg_hotdeal_arw.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 978 ; pcap_cnt: 9927840, event_type: fileinfo, proto: TCP, http_hostname: img.danawa.com, http_url: /new/danawa_main/v2/img/bg_hotdeal_arw.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 978, app_proto: http, fileinfo_filename: /new/danawa_main/v2/img/bg_hotdeal_arw.png, fileinfo_gaps: False, fileinfo_state: CLOSED, fileinfo_stored: False, fileinfo_size: 978, fileinfo_tx_id: 34 ; pcap_cnt: 9927864, event_type: http, proto: TCP, tx_id: 35, http_hostname: img.danawa.com, http_url: /new/help/img/bg_cs_v2.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 20288 ; pcap_cnt: 9927911, event_type: fileinfo, proto: TCP, http_hostname: img.danawa.com, http_url: /new/help/img/bg_cs_v2.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 20288, app_proto: http, fileinfo_filename: /new/help/img/bg_cs_v2.png, fileinfo_gaps: True, fileinfo_state: TRUNCATED, fileinfo_stored: False, fileinfo_size: 20288, fileinfo_tx_id: 35 ; pcap_cnt: 9927923, event_type: http, proto: TCP, tx_id: 36, http_hostname: img.danawa.com, http_url: /new/danawa_main/v1/img/icon_contents_confirm2.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 7175 ; pcap_cnt: 9927976, event_type: fileinfo, proto: TCP, http_hostname: img.danawa.com, http_url: /new/danawa_main/v1/img/icon_contents_confirm2.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 7175, app_proto: http, fileinfo_filename: /new/danawa_main/v1/img/icon_contents_confirm2.png, fileinfo_gaps: True, fileinfo_state: TRUNCATED, fileinfo_stored: False, fileinfo_size: 7175, fileinfo_tx_id: 36 ; pcap_cnt: 9927983, event_type: http, proto: TCP, tx_id: 37, http_hostname: img.danawa.com, http_url: /new/noData/img/noImg_540X218.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 5112 ; pcap_cnt: 9928037, event_type: fileinfo, proto: TCP, http_hostname: img.danawa.com, http_url: /new/noData/img/noImg_540X218.png, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/png, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 5112, app_proto: http, fileinfo_filename: /new/noData/img/noImg_540X218.png, fileinfo_gaps: True, fileinfo_state: TRUNCATED, fileinfo_stored: False, fileinfo_size: 5112, fileinfo_tx_id: 37 ; pcap_cnt: 9928041, event_type: http, proto: TCP, tx_id: 38, http_hostname: img.danawa.com, http_url: /new/danawa_main/v1/img/bg_category_dot.gif, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/gif, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 1095 ; pcap_cnt: 9928203, event_type: fileinfo, proto: TCP, http_hostname: img.danawa.com, http_url: /new/danawa_main/v1/img/bg_category_dot.gif, http_http_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/534.50.2 (KHTML, like Gecko) Version/5.0.6 Safari/533.22.3, http_http_content_type: image/gif, http_http_refer: http://www.danawa.com/, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 1095, app_proto: http, fileinfo_filename: /new/danawa_main/v1/img/bg_category_dot.gif, fileinfo_gaps: False, fileinfo_state: CLOSED, fileinfo_stored: False, fileinfo_size: 1095, fileinfo_tx_id: 38
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.