{
  "timestamp": "2023-05-10T13:52:03.204093+0200",
  "flow_id": 1112604491726021,
  "in_iface": "tppdummy0",
  "event_type": "ftp",
  "src_ip": "192.168.221.134",
  "src_port": 49204,
  "dest_ip": "181.224.138.240",
  "dest_port": 21,
  "proto": "TCP",
  "tx_id": 1,
  "ether": {
    "src_mac": "00:00:00:00:00:00",
    "dest_mac": "00:00:00:00:00:00"
  },
  "app_proto": "ftp",
  "app_proto_tc": "failed",
  "ftp": {
    "command": "USER",
    "command_data": "cp@gilkeyphotography.com",
    "command_truncated": false,
    "completion_code": [
      "331"
    ],
    "reply": [
      "User cp@gilkeyphotography.com OK. Password required"
    ],
    "reply_received": "yes",
    "reply_truncated": false
  },
  "host": "SSProbe-1",
  "see_id": "2e2cf4a77cbd",
  "see_name": "stamus-central-server"
}
{
  "timestamp": "2023-05-10T14:12:50.915861+0200",
  "flow_id": 620716476780352,
  "parent_id": 821433478969247,
  "alerted": true,
  "in_iface": "tppdummy0",
  "event_type": "ftp_data",
  "src_ip": "10.1.3.101",
  "src_port": 49183,
  "dest_ip": "186.202.153.214",
  "dest_port": 60483,
  "proto": "TCP",
  "tx_id": 0,
  "ether": {
    "src_mac": "00:08:02:1c:47:ae",
    "dest_mac": "20:e5:2a:b6:93:f1"
  },
  "app_proto": "ftp-data",
  "ftp_data": {
    "filename": "/public_html/sam99/win.zip",
    "command": "RETR"
  },
  "host": "SSProbe-1",
  "see_id": "2e2cf4a77cbd",
  "see_name": "stamus-central-server"
}