{
  "timestamp": "2015-10-22T15:08:56.922172+0200",
  "flow_id": 1124567928541756,
  "pcap_cnt": 3738698,
  "event_type": "ike",
  "src_ip": "10.100.152.128",
  "src_port": 500,
  "dest_ip": "77.245.33.76",
  "dest_port": 500,
  "proto": "UDP",
  "pkt_src": "wire/pcap",
  "ike": {
    "version_major": 1,
    "version_minor": 0,
    "init_spi": "bf178fe4e593b7b9",
    "resp_spi": "0000000000000000",
    "message_id": 0,
    "exchange_type": 2,
    "payload": [
      "Transform",
      "SecurityAssociation",
      "Proposal",
      "VendorID"
    ],
    "ikev1": {
      "doi": 1,
      "encrypted_payloads": false,
      "client": {
        "proposals": [
          {
            "sa_life_type": "LifeTypeSeconds",
            "sa_life_type_raw": 1,
            "sa_life_duration": "Unknown",
            "sa_life_duration_raw": 3600,
            "alg_enc": "EncAesCbc",
            "alg_enc_raw": 7,
            "alg_hash": "HashSha",
            "alg_hash_raw": 2,
            "alg_auth": "AuthRsaSignatures",
            "alg_auth_raw": 3,
            "alg_dh": "GroupModp8192Bit",
            "alg_dh_raw": 18,
            "sa_key_length": "Unknown",
            "sa_key_length_raw": 256
          },
          {
            "sa_life_type": "LifeTypeSeconds",
            "sa_life_type_raw": 1,
            "sa_life_duration": "Unknown",
            "sa_life_duration_raw": 3600,
            "alg_enc": "EncAesCbc",
            "alg_enc_raw": 7,
            "alg_hash": "HashSha",
            "alg_hash_raw": 2,
            "alg_auth": "AuthRsaSignatures",
            "alg_auth_raw": 3,
            "alg_dh": "GroupModp6144Bit",
            "alg_dh_raw": 17,
            "sa_key_length": "Unknown",
            "sa_key_length_raw": 256
          },
          {
            "sa_life_type": "LifeTypeSeconds",
            "sa_life_type_raw": 1,
            "sa_life_duration": "Unknown",
            "sa_life_duration_raw": 3600,
            "alg_enc": "EncAesCbc",
            "alg_enc_raw": 7,
            "alg_hash": "HashSha",
            "alg_hash_raw": 2,
            "alg_auth": "AuthRsaSignatures",
            "alg_auth_raw": 3,
            "alg_dh": "GroupModp4096Bit",
            "alg_dh_raw": 16,
            "sa_key_length": "Unknown",
            "sa_key_length_raw": 256
          },
          {
            "sa_life_type": "LifeTypeSeconds",
            "sa_life_type_raw": 1,
            "sa_life_duration": "Unknown",
            "sa_life_duration_raw": 3600,
            "alg_enc": "EncAesCbc",
            "alg_enc_raw": 7,
            "alg_hash": "HashSha",
            "alg_hash_raw": 2,
            "alg_auth": "AuthRsaSignatures",
            "alg_auth_raw": 3,
            "alg_dh": "GroupModp3072Bit",
            "alg_dh_raw": 15,
            "sa_key_length": "Unknown",
            "sa_key_length_raw": 256
          },
          {
            "sa_life_type": "LifeTypeSeconds",
            "sa_life_type_raw": 1,
            "sa_life_duration": "Unknown",
            "sa_life_duration_raw": 3600,
            "alg_enc": "EncAesCbc",
            "alg_enc_raw": 7,
            "alg_hash": "HashSha",
            "alg_hash_raw": 2,
            "alg_auth": "AuthRsaSignatures",
            "alg_auth_raw": 3,
            "alg_dh": "GroupModp2048Bit",
            "alg_dh_raw": 14,
            "sa_key_length": "Unknown",
            "sa_key_length_raw": 256
          },
          {
            "sa_life_type": "LifeTypeSeconds",
            "sa_life_type_raw": 1,
            "sa_life_duration": "Unknown",
            "sa_life_duration_raw": 3600,
            "alg_enc": "EncAesCbc",
            "alg_enc_raw": 7,
            "alg_hash": "HashSha",
            "alg_hash_raw": 2,
            "alg_auth": "AuthRsaSignatures",
            "alg_auth_raw": 3,
            "alg_dh": "GroupModp1536Bit",
            "alg_dh_raw": 5,
            "sa_key_length": "Unknown",
            "sa_key_length_raw": 256
          },
          {
            "sa_life_type": "LifeTypeSeconds",
            "sa_life_type_raw": 1,
            "sa_life_duration": "Unknown",
            "sa_life_duration_raw": 3600,
            "alg_enc": "EncAesCbc",
            "alg_enc_raw": 7,
            "alg_hash": "HashSha",
            "alg_hash_raw": 2,
            "alg_auth": "AuthRsaSignatures",
            "alg_auth_raw": 3,
            "alg_dh": "GroupAlternate1024BitModpGroup",
            "alg_dh_raw": 2,
            "sa_key_length": "Unknown",
            "sa_key_length_raw": 256
          }
        ]
      },
      "server": {},
      "vendor_ids": [
        "",
        "afcad71368a1f1c96b8696fc77570100",
        "4a131c81070358455c5728f20e95452f",
        "7d9419a65310ca6f2c179d9215529d56",
        "90cb80913ebb696e086381b5ec427b1f",
        "cd60464335df21f87cfdb2fc68b6a448",
        "4485152d18b6bbcd0be8a8469579ddcc",
        "4048b7d56ebce88525e7de7f00d6c2d380000000",
        "c33272b6ebcf606af6cc2fc7492eaa95",
        "80dbf81ba815edf6b87910bb92cd58b7",
        "68dc8d102dc2e84623a7a3df153aee62",
        "388ab3cb6e15198d3d43a8f750d3885f"
      ]
    }
  }
}