{"action":"created","issue":{"url":"https://api.github.com/repos/robcowart/elastiflow/issues/84","repository_url":"https://api.github.com/repos/robcowart/elastiflow","labels_url":"https://api.github.com/repos/robcowart/elastiflow/issues/84/labels{/name}","comments_url":"https://api.github.com/repos/robcowart/elastiflow/issues/84/comments","events_url":"https://api.github.com/repos/robcowart/elastiflow/issues/84/events","html_url":"https://github.com/robcowart/elastiflow/issues/84","id":320574095,"number":84,"title":"Layer 7 analysis or deep packet inspection with Elastiflow?","user":{"login":"victorhooi","id":243499,"avatar_url":"https://avatars3.githubusercontent.com/u/243499?v=4","gravatar_id":"","url":"https://api.github.com/users/victorhooi","html_url":"https://github.com/victorhooi","followers_url":"https://api.github.com/users/victorhooi/followers","following_url":"https://api.github.com/users/victorhooi/following{/other_user}","gists_url":"https://api.github.com/users/victorhooi/gists{/gist_id}","starred_url":"https://api.github.com/users/victorhooi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/victorhooi/subscriptions","organizations_url":"https://api.github.com/users/victorhooi/orgs","repos_url":"https://api.github.com/users/victorhooi/repos","events_url":"https://api.github.com/users/victorhooi/events{/privacy}","received_events_url":"https://api.github.com/users/victorhooi/received_events","type":"User","site_admin":false},"labels":[{"id":596095631,"url":"https://api.github.com/repos/robcowart/elastiflow/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":14,"created_at":"2018-05-06T08:39:23Z","updated_at":"2018-05-18T06:26:19Z","closed_at":"2018-05-13T17:09:33Z","author_association":"NONE","body":"Elastiflow looks pretty awesome =).\r\n\r\nI know that we can track services on known ports (e.g. FTP, SSH, web traffic)\r\n\r\nHowever, what about applications that use randomised ports, or that are difficult to distinguish by ports alone?\r\n\r\nBasically - is there any way to do layer-7 analysis, or deep packet inspection with Elastiflow?"},"comment":{"url":"https://api.github.com/repos/robcowart/elastiflow/issues/comments/390107433","html_url":"https://github.com/robcowart/elastiflow/issues/84#issuecomment-390107433","issue_url":"https://api.github.com/repos/robcowart/elastiflow/issues/84","id":390107433,"user":{"login":"robcowart","id":10326954,"avatar_url":"https://avatars1.githubusercontent.com/u/10326954?v=4","gravatar_id":"","url":"https://api.github.com/users/robcowart","html_url":"https://github.com/robcowart","followers_url":"https://api.github.com/users/robcowart/followers","following_url":"https://api.github.com/users/robcowart/following{/other_user}","gists_url":"https://api.github.com/users/robcowart/gists{/gist_id}","starred_url":"https://api.github.com/users/robcowart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robcowart/subscriptions","organizations_url":"https://api.github.com/users/robcowart/orgs","repos_url":"https://api.github.com/users/robcowart/repos","events_url":"https://api.github.com/users/robcowart/events{/privacy}","received_events_url":"https://api.github.com/users/robcowart/received_events","type":"User","site_admin":false},"created_at":"2018-05-18T06:26:19Z","updated_at":"2018-05-18T06:26:19Z","author_association":"OWNER","body":"Good timing! I have some nProbe experimentation on my schedule for today. It is certainly possible to catch flow data from nProbe. I will be playing around with the options to see which provide the most valuable results."}}
{"actor":{"display_login":"robcowart"}}