Dataparse failure using csv filter


(Rusty Wilson) #1

Thanks in advance. Lots of info to follow...

I've been fighting this for quite sometime, and I've been unable to locate any other topics that relate specifically to this problem.

First, here's a summary of the issue:

I'm parsing Bro IDS logs with Logstash and sending them to a remote Elasticsearch cluster.
Every few days or so, Logstash will encouter this error and stop processing logs.

Logstash continues running, but is unable to clear the send buffer, and no data is sent to the cluster.
It does not recover elegantly, and it is necessary to forcibly stop the service and restart it to overcome the failure.

Details can be found below, but something appears to be happening to cause logstash and/or the csv filter plugin to falsely detect a newline in the following data (this is one field - "uri"=>):

/empty_flash?e=25&q=2&lo=1&qs=1&ak=https://s1.2mdn.net/viewad/4782149/wp-hba-spring15-728x90-3d.gif&i=TRADEDESKV3&bq=0&g=6&h=90&w=728&cm=0&zMoatImpressionId=0ca8a517-5d9c-4786-ae26-c4860341ad32&zMoatCachebuster=246754&zMoatPartnerID=gwg88r3&zMoatViewType=0&zMoatCreative=g4ugilxz&zMoatTempIDs=http%3A%2F%2Fuswfb.adsrvr.org%2Fdata%2Fpie%2F%3Fpie%3D20%26vet%3DVIEWABILITY_EVENT_TYPE%26rtb%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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0

The newline appears to occur here:

...YWQzMiZhaWQ9MSZ<newline>3cD0ke0FVQ1RJT05f...

Details:

logstash 1.5.5
logstash-filter-csv (1.0.0)
elasticsearch 1.7.3
Java(TM) SE Runtime Environment (build 1.8.0_66-b17)

(Rusty Wilson) #2

Here's the filter

csv {
  columns => [ "ts","uid","id_orig_h","id_orig_p","id_resp_h","id_resp_p","trans_depth","method","host","uri","referrer","user_agent","request_body_len","response_body_len","status_code","status_msg","info_code","info_msg","filename","tags","username","password","proxied","orig_fuids","orig_mime_types","resp_fuids","resp_mime_types" ]
  separator => "    "
}

Here's the relevant line from bro_HTTP.log (input):

1450123202.275026\tC0vAYX1dzsw2v2YiPf\t192.168.29.157\t50802\t52.21.116.233\t80\t1\tGET\tafs.moatads.com\t/empty_flash?e=25&q=2&lo=1&qs=1&ak=https://s1.2mdn.net/viewad/4782149/wp-hba-spring15-728x90-3d.gif&i=TRADEDESKV3&bq=0&g=6&h=90&w=728&cm=0&zMoatImpressionId=0ca8a517-5d9c-4786-ae26-c4860341ad32&zMoatCachebuster=246754&zMoatPartnerID=gwg88r3&zMoatViewType=0&zMoatCreative=g4ugilxz&zMoatTempIDs=http%3A%2F%2Fuswfb.adsrvr.org%2Fdata%2Fpie%2F%3Fpie%3D20%26vet%3DVIEWABILITY_EVENT_TYPE%26rtb%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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t(empty)\t-\t-\t-\t-\t-\t-\t-

(Rusty Wilson) #4

Here's the relevant entry from logstash.log:

{:timestamp=>"2015-12-14T20:00:15.682000+0000", :message=>"IP Field contained invalid IP address or hostname", :field=>"id_orig_h", :event=>#<LogStash::Event:0x12cb6a07 @metadata_accessors=#<LogStash::Util::Accessors:0x3e6ad7d5 @store={"path"=>"/nsm/bro/logs/current/http_eth1.log"}, @lut={"[path]"=>[{"path"=>"/nsm/bro/logs/current/http_eth1.log"}, "path"]}>, @cancelled=false, @data={"message"=>["3cD0ke0FVQ1RJT05fUFJJQ0V9JndwYz1VU0Qmc2ZlPThhNjlmYjQmcHVpZD0mdGRpZD0mcGlkPWd3Zzg4cjMmYWc9NDFraXkyaCZjcmlkPWc0dWdpbHh6JmZxPTAmdGRfcz13d3cuY2VsZWJyaXR5bmV0d29ydGguY29tJnJjYXRzPTdzcCZtY2F0PSZtc3RlPWNlbGVicml0eW5ldHdvcnRoLmNvbSZtZmxkPTQmbXNzaT1qcHp2c3M0bCZtZnNpPXAyb3dsZG4mdWhvdz0zNSZhZ3NhPSZyZ2NvPVVuaXRlZCUyMFN0YXRlcyZyZ3JlPUNhbGlmb3JuaWEmcmdtZT04MDMmcmdjaT1Mb3MlMjBBbmdlbGVzJnJnej05MDAzNSZzdmJ0dGQ9MSZkdD1QQyZvc2Y9T1NYJm9zPU90aGVyJmJyPVNhZmFyaSZybGFuZ3M9ZW4mbWxhbmc9JnN2cGlkPSZkaWQ9JnJjeHQ9T3RoZXImbGF0PTM0LjA1MjMwNyZsb249LTExOC4zODUyMDEmdG1wYz0mZGFpZD0mdnA9MCZvc2k9Jm9zdj0mYnA9MS43NiZkdXI9Q2pBS0RHTm9ZWEpuWlMxaGJHd3RNU0lnQ1AvLy8vLy8vLy8vL3dFU0UzUjBaRjlrWVhSaFgyVjRZMngxYzJsdmJuTT0mY3JyZWxyPSZzdj1hZGNvbmR1Y3Rvcg%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML,like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, @metadata={"path"=>"/nsm/bro/logs/current/http_eth1.log"},

(Rusty Wilson) #5
@accessors=#<LogStash::Util::Accessors:0x293999d6 @store={"message"=>["3cD0ke0FVQ1RJT05fUFJJQ0V9JndwYz1VU0Qmc2ZlPThhNjlmYjQmcHVpZD0mdGRpZD0mcGlkPWd3Zzg4cjMmYWc9NDFraXkyaCZjcmlkPWc0dWdpbHh6JmZxPTAmdGRfcz13d3cuY2VsZWJyaXR5bmV0d29ydGguY29tJnJjYXRzPTdzcCZtY2F0PSZtc3RlPWNlbGVicml0eW5ldHdvcnRoLmNvbSZtZmxkPTQmbXNzaT1qcHp2c3M0bCZtZnNpPXAyb3dsZG4mdWhvdz0zNSZhZ3NhPSZyZ2NvPVVuaXRlZCUyMFN0YXRlcyZyZ3JlPUNhbGlmb3JuaWEmcmdtZT04MDMmcmdjaT1Mb3MlMjBBbmdlbGVzJnJnej05MDAzNSZzdmJ0dGQ9MSZkdD1QQyZvc2Y9T1NYJm9zPU90aGVyJmJyPVNhZmFyaSZybGFuZ3M9ZW4mbWxhbmc9JnN2cGlkPSZkaWQ9JnJjeHQ9T3RoZXImbGF0PTM0LjA1MjMwNyZsb249LTExOC4zODUyMDEmdG1wYz0mZGFpZD0mdnA9MCZvc2k9Jm9zdj0mYnA9MS43NiZkdXI9Q2pBS0RHTm9ZWEpuWlMxaGJHd3RNU0lnQ1AvLy8vLy8vLy8vL3dFU0UzUjBaRjlrWVhSaFgyVjRZMngxYzJsdmJuTT0mY3JyZWxyPSZzdj1hZGNvbmR1Y3Rvcg%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"3cD0ke0FVQ1RJT05fUFJJQ0V9JndwYz1VU0Qmc2ZlPThhNjlmYjQmcHVpZD0mdGRpZD0mcGlkPWd3Zzg4cjMmYWc9NDFraXkyaCZjcmlkPWc0dWdpbHh6JmZxPTAmdGRfcz13d3cuY2VsZWJyaXR5bmV0d29ydGguY29tJnJjYXRzPTdzcCZtY2F0PSZtc3RlPWNlbGVicml0eW5ldHdvcnRoLmNvbSZtZmxkPTQmbXNzaT1qcHp2c3M0bCZtZnNpPXAyb3dsZG4mdWhvdz0zNSZhZ3NhPSZyZ2NvPVVuaXRlZCUyMFN0YXRlcyZyZ3JlPUNhbGlmb3JuaWEmcmdtZT04MDMmcmdjaT1Mb3MlMjBBbmdlbGVzJnJnej05MDAzNSZzdmJ0dGQ9MSZkdD1QQyZvc2Y9T1NYJm9zPU90aGVyJmJyPVNhZmFyaSZybGFuZ3M9ZW4mbWxhbmc9JnN2cGlkPSZkaWQ9JnJjeHQ9T3RoZXImbGF0PTM0LjA1MjMwNyZsb249LTExOC4zODUyMDEmdG1wYz0mZGFpZD0mdnA9MCZvc2k9Jm9zdj0mYnA9MS43NiZkdXI9Q2pBS0RHTm9ZWEpuWlMxaGJHd3RNU0lnQ1AvLy8vLy8vLy8vL3dFU0UzUjBaRjlrWVhSaFgyVjRZMngxYzJsdmJuTT0mY3JyZWxyPSZzdj1hZGNvbmR1Y3Rvcg%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"},

(Rusty Wilson) #6
@lut={"host"=>[{"message"=>["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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"3cD0ke0FVQ1RJT05fUFJJQ0V9JndwYz1VU0Qmc2ZlPThhNjlmYjQmcHVpZD0mdGRpZD0mcGlkPWd3Zzg4cjMmYWc9NDFraXkyaCZjcmlkPWc0dWdpbHh6JmZxPTAmdGRfcz13d3cuY2VsZWJyaXR5bmV0d29ydGguY29tJnJjYXRzPTdzcCZtY2F0PSZtc3RlPWNlbGVicml0eW5ldHdvcnRoLmNvbSZtZmxkPTQmbXNzaT1qcHp2c3M0bCZtZnNpPXAyb3dsZG4mdWhvdz0zNSZhZ3NhPSZyZ2NvPVVuaXRlZCUyMFN0YXRlcyZyZ3JlPUNhbGlmb3JuaWEmcmdtZT04MDMmcmdjaT1Mb3MlMjBBbmdlbGVzJnJnej05MDAzNSZzdmJ0dGQ9MSZkdD1QQyZvc2Y9T1NYJm9zPU90aGVyJmJyPVNhZmFyaSZybGFuZ3M9ZW4mbWxhbmc9JnN2cGlkPSZkaWQ9JnJjeHQ9T3RoZXImbGF0PTM0LjA1MjMwNyZsb249LTExOC4zODUyMDEmdG1wYz0mZGFpZD0mdnA9MCZvc2k9Jm9zdj0mYnA9MS43NiZkdXI9Q2pBS0RHTm9ZWEpuWlMxaGJHd3RNU0lnQ1AvLy8vLy8vLy8vL3dFU0UzUjBaRjlrWVhSaFgyVjRZMngxYzJsdmJuTT0mY3JyZWxyPSZzdj1hZGNvbmR1Y3Rvcg%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0,"status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0(Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, "host"],

(Rusty Wilson) #7
"path"=>[{"message"=>["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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, "path"],

(Rusty Wilson) #8
"type"=>[{"message"=>["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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko)Version/9.0.2 Safari/601.3.9"}, "type"],

(Rusty Wilson) #9
"[message]"=>[{"message"=>["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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"3cD0ke0FVQ1RJT05fUFJJQ0V9JndwYz1VU0Qmc2ZlPThhNjlmYjQmcHVpZD0mdGRpZD0mcGlkPWd3Zzg4cjMmYWc9NDFraXkyaCZjcmlkPWc0dWdpbHh6JmZxPTAmdGRfcz13d3cuY2VsZWJyaXR5bmV0d29ydGguY29tJnJjYXRzPTdzcCZtY2F0PSZtc3RlPWNlbGVicml0eW5ldHdvcnRoLmNvbSZtZmxkPTQmbXNzaT1qcHp2c3M0bCZtZnNpPXAyb3dsZG4mdWhvdz0zNSZhZ3NhPSZyZ2NvPVVuaXRlZCUyMFN0YXRlcyZyZ3JlPUNhbGlmb3JuaWEmcmdtZT04MDMmcmdjaT1Mb3MlMjBBbmdlbGVzJnJnej05MDAzNSZzdmJ0dGQ9MSZkdD1QQyZvc2Y9T1NYJm9zPU90aGVyJmJyPVNhZmFyaSZybGFuZ3M9ZW4mbWxhbmc9JnN2cGlkPSZkaWQ9JnJjeHQ9T3RoZXImbGF0PTM0LjA1MjMwNyZsb249LTExOC4zODUyMDEmdG1wYz0mZGFpZD0mdnA9MCZvc2k9Jm9zdj0mYnA9MS43NiZkdXI9Q2pBS0RHTm9ZWEpuWlMxaGJHd3RNU0lnQ1AvLy8vLy8vLy8vL3dFU0UzUjBaRjlrWVhSaFgyVjRZMngxYzJsdmJuTT0mY3JyZWxyPSZzdj1hZGNvbmR1Y3Rvcg%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, "message"],

(Rusty Wilson) #10
"message"=>[{"message"=>["3cD0ke0FVQ1RJT05fUFJJQ0V9JndwYz1VU0Qmc2ZlPThhNjlmYjQmcHVpZD0mdGRpZD0mcGlkPWd3Zzg4cjMmYWc9NDFraXkyaCZjcmlkPWc0dWdpbHh6JmZxPTAmdGRfcz13d3cuY2VsZWJyaXR5bmV0d29ydGguY29tJnJjYXRzPTdzcCZtY2F0PSZtc3RlPWNlbGVicml0eW5ldHdvcnRoLmNvbSZtZmxkPTQmbXNzaT1qcHp2c3M0bCZtZnNpPXAyb3dsZG4mdWhvdz0zNSZhZ3NhPSZyZ2NvPVVuaXRlZCUyMFN0YXRlcyZyZ3JlPUNhbGlmb3JuaWEmcmdtZT04MDMmcmdjaT1Mb3MlMjBBbmdlbGVzJnJnej05MDAzNSZzdmJ0dGQ9MSZkdD1QQyZvc2Y9T1NYJm9zPU90aGVyJmJyPVNhZmFyaSZybGFuZ3M9ZW4mbWxhbmc9JnN2cGlkPSZkaWQ9JnJjeHQ9T3RoZXImbGF0PTM0LjA1MjMwNyZsb249LTExOC4zODUyMDEmdG1wYz0mZGFpZD0mdnA9MCZvc2k9Jm9zdj0mYnA9MS43NiZkdXI9Q2pBS0RHTm9ZWEpuWlMxaGJHd3RNU0lnQ1AvLy8vLy8vLy8vL3dFU0UzUjBaRjlrWVhSaFgyVjRZMngxYzJsdmJuTT0mY3JyZWxyPSZzdj1hZGNvbmR1Y3Rvcg%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko)Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"3cD0ke0FVQ1RJT05fUFJJQ0V9JndwYz1VU0Qmc2ZlPThhNjlmYjQmcHVpZD0mdGRpZD0mcGlkPWd3Zzg4cjMmYWc9NDFraXkyaCZjcmlkPWc0dWdpbHh6JmZxPTAmdGRfcz13d3cuY2VsZWJyaXR5bmV0d29ydGguY29tJnJjYXRzPTdzcCZtY2F0PSZtc3RlPWNlbGVicml0eW5ldHdvcnRoLmNvbSZtZmxkPTQmbXNzaT1qcHp2c3M0bCZtZnNpPXAyb3dsZG4mdWhvdz0zNSZhZ3NhPSZyZ2NvPVVuaXRlZCUyMFN0YXRlcyZyZ3JlPUNhbGlmb3JuaWEmcmdtZT04MDMmcmdjaT1Mb3MlMjBBbmdlbGVzJnJnej05MDAzNSZzdmJ0dGQ9MSZkdD1QQyZvc2Y9T1NYJm9zPU90aGVyJmJyPVNhZmFyaSZybGFuZ3M9ZW4mbWxhbmc9JnN2cGlkPSZkaWQ9JnJjeHQ9T3RoZXImbGF0PTM0LjA1MjMwNyZsb249LTExOC4zODUyMDEmdG1wYz0mZGFpZD0mdnA9MCZvc2k9Jm9zdj0mYnA9MS43NiZkdXI9Q2pBS0RHTm9ZWEpuWlMxaGJHd3RNU0lnQ1AvLy8vLy8vLy8vL3dFU0UzUjBaRjlrWVhSaFgyVjRZMngxYzJsdmJuTT0mY3JyZWxyPSZzdj1hZGNvbmR1Y3Rvcg%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, "message"],

(Rusty Wilson) #11
"[type]"=>[{"message"=>["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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-","user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, "type"],

(Rusty Wilson) #12
"ts"=>[{"message"=>["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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, likeGecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, "ts"],

(Rusty Wilson) #13
"uid"=>[{"message"=>["3cD0ke0FVQ1RJT05fUFJJQ0V9JndwYz1VU0Qmc2ZlPThhNjlmYjQmcHVpZD0mdGRpZD0mcGlkPWd3Zzg4cjMmYWc9NDFraXkyaCZjcmlkPWc0dWdpbHh6JmZxPTAmdGRfcz13d3cuY2VsZWJyaXR5bmV0d29ydGguY29tJnJjYXRzPTdzcCZtY2F0PSZtc3RlPWNlbGVicml0eW5ldHdvcnRoLmNvbSZtZmxkPTQmbXNzaT1qcHp2c3M0bCZtZnNpPXAyb3dsZG4mdWhvdz0zNSZhZ3NhPSZyZ2NvPVVuaXRlZCUyMFN0YXRlcyZyZ3JlPUNhbGlmb3JuaWEmcmdtZT04MDMmcmdjaT1Mb3MlMjBBbmdlbGVzJnJnej05MDAzNSZzdmJ0dGQ9MSZkdD1QQyZvc2Y9T1NYJm9zPU90aGVyJmJyPVNhZmFyaSZybGFuZ3M9ZW4mbWxhbmc9JnN2cGlkPSZkaWQ9JnJjeHQ9T3RoZXImbGF0PTM0LjA1MjMwNyZsb249LTExOC4zODUyMDEmdG1wYz0mZGFpZD0mdnA9MCZvc2k9Jm9zdj0mYnA9MS43NiZkdXI9Q2pBS0RHTm9ZWEpuWlMxaGJHd3RNU0lnQ1AvLy8vLy8vLy8vL3dFU0UzUjBaRjlrWVhSaFgyVjRZMngxYzJsdmJuTT0mY3JyZWxyPSZzdj1hZGNvbmR1Y3Rvcg%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, "uid"],

(Rusty Wilson) #14
"id_orig_h"=>[{"message"=>["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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0\thttp://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/\tMozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML,like Gecko) Version/9.0.2 Safari/601.3.9\t0\t0\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-\t-"], "@version"=>"1", "@timestamp"=>"2015-12-14T20:00:14.875Z", "host"=>"-", "path"=>"/nsm/bro/logs/current/http_eth1.log", "type"=>"BRO_http", "ts"=>"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%253D%253D&f=0&j=&o=4&bn=c9da213-clean&t=1450123189239&de=915165754267&cu=1450123189223&m=12639&ar=92a002c-clean&cb=0&ll=1&ln=1&r=19.0.0&dl=0&dm=1000&dn=89&gh=1&qa=2560&qb=1440&qi=2560&qj=1388&qf=1462&qe=1031&qh=1462&qg=1120&lk=678&lb=4744&le=0&ch=0&as=1&ag=5400&an=5077&gi=1&gf=5400&gg=5077&ez=1&ck=1052&kw=1319&aj=1&pg=100&pf=100&ib=0&nb=1&cc=1&bw=5400&bx=5077&ci=1052&jz=1319&dj=1&em=0&eo=1&en=0&bu=10977&cd=5345&ah=10977&am=5345&ai=7165&cl=0&au=-1&av=-1&by=-1&at=0&d=gwg88r3:qtjqzo6:7bxpgu7s:41kiy2h&bd=www.celebritynetworth.com&ab=1&ac=1&fd=1&it=500&fz=1&fs=64279&na=646409595&cs=0", "uid"=>"http://www.celebritynetworth.com/articles/sports-news/conor-mcgregor-just-made-a-ton-of-money/", "id_orig_h"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9", "id_orig_p"=>0, "id_resp_h"=>"0", "id_resp_p"=>0, "trans_depth"=>0, "method"=>"-", "uri"=>"-", "referrer"=>"-", "user_agent"=>"-", "request_body_len"=>0, "response_body_len"=>0, "status_code"=>0, "status_msg"=>"-", "info_code"=>0, "info_msg"=>"-", "tags"=>["_dateparsefailure"], "client_name"=>"smuggler", "combined_src_ip"=>"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"}, "id_orig_h"],

(Rusty Wilson) #15

That's probably enough for now!


(system) #16