1[
2  {
3    "_index": "packets-2004-12-05",
4    "_type": "doc",
5    "_score": null,
6    "_source": {
7      "layers": {
8        "frame_raw": [
9          "ffffffffffff000b8201fc4208004500012ca8360000fa11178b00000000ffffffff004400430118591f0101060000003d1d0000000000000000000000000000000000000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501013d0701000b8201fc4232040000000037040103062aff00000000000000",
10          0,
11          314,
12          0,
13          1
14        ],
15        "frame": {
16          "frame.encap_type_raw": [
17            "",
18            0,
19            0,
20            0,
21            13
22          ],
23          "frame.time_raw": [
24            "",
25            0,
26            0,
27            0,
28            24
29          ],
30          "frame.offset_shift_raw": [
31            "",
32            0,
33            0,
34            0,
35            25
36          ],
37          "frame.time_epoch_raw": [
38            "",
39            0,
40            0,
41            0,
42            25
43          ],
44          "frame.time_delta_raw": [
45            "",
46            0,
47            0,
48            0,
49            25
50          ],
51          "frame.time_delta_displayed_raw": [
52            "",
53            0,
54            0,
55            0,
56            25
57          ],
58          "frame.time_relative_raw": [
59            "",
60            0,
61            0,
62            0,
63            25
64          ],
65          "frame.number_raw": [
66            "",
67            0,
68            0,
69            0,
70            7
71          ],
72          "frame.len_raw": [
73            "",
74            0,
75            0,
76            0,
77            7
78          ],
79          "frame.cap_len_raw": [
80            "",
81            0,
82            0,
83            0,
84            7
85          ],
86          "frame.marked_raw": [
87            "",
88            0,
89            0,
90            0,
91            2
92          ],
93          "frame.ignored_raw": [
94            "",
95            0,
96            0,
97            0,
98            2
99          ],
100          "frame.protocols_raw": [
101            "",
102            0,
103            0,
104            0,
105            26
106          ]
107        },
108        "eth_raw": [
109          "ffffffffffff000b8201fc420800",
110          0,
111          14,
112          0,
113          1
114        ],
115        "eth": {
116          "eth.dst_raw": [
117            "ffffffffffff",
118            0,
119            6,
120            0,
121            29
122          ],
123          "eth.dst_tree": {
124            "eth.dst_resolved_raw": [
125              "ffffffffffff",
126              0,
127              6,
128              0,
129              26
130            ],
131            "eth.dst.oui_raw": [
132              "ffffff",
133              0,
134              3,
135              0,
136              6
137            ],
138            "eth.addr_raw": [
139              "ffffffffffff",
140              0,
141              6,
142              0,
143              29
144            ],
145            "eth.addr_resolved_raw": [
146              "ffffffffffff",
147              0,
148              6,
149              0,
150              26
151            ],
152            "eth.addr.oui_raw": [
153              "ffffff",
154              0,
155              3,
156              0,
157              6
158            ],
159            "eth.dst.lg_raw": [
160              "1",
161              0,
162              3,
163              131072,
164              2
165            ],
166            "eth.lg_raw": [
167              "1",
168              0,
169              3,
170              131072,
171              2
172            ],
173            "eth.dst.ig_raw": [
174              "1",
175              0,
176              3,
177              65536,
178              2
179            ],
180            "eth.ig_raw": [
181              "1",
182              0,
183              3,
184              65536,
185              2
186            ]
187          },
188          "eth.src_raw": [
189            "000b8201fc42",
190            6,
191            6,
192            0,
193            29
194          ],
195          "eth.src_tree": {
196            "eth.src_resolved_raw": [
197              "000b8201fc42",
198              6,
199              6,
200              0,
201              26
202            ],
203            "eth.src.oui_raw": [
204              "000b82",
205              6,
206              3,
207              0,
208              6
209            ],
210            "eth.src.oui_resolved_raw": [
211              "000b8201fc42",
212              6,
213              6,
214              0,
215              26
216            ],
217            "eth.addr_raw": [
218              "000b8201fc42",
219              6,
220              6,
221              0,
222              29
223            ],
224            "eth.addr_resolved_raw": [
225              "000b8201fc42",
226              6,
227              6,
228              0,
229              26
230            ],
231            "eth.addr.oui_raw": [
232              "000b82",
233              6,
234              3,
235              0,
236              6
237            ],
238            "eth.addr.oui_resolved_raw": [
239              "000b8201fc42",
240              6,
241              6,
242              0,
243              26
244            ],
245            "eth.src.lg_raw": [
246              "0",
247              6,
248              3,
249              131072,
250              2
251            ],
252            "eth.lg_raw": [
253              "0",
254              6,
255              3,
256              131072,
257              2
258            ],
259            "eth.src.ig_raw": [
260              "0",
261              6,
262              3,
263              65536,
264              2
265            ],
266            "eth.ig_raw": [
267              "0",
268              6,
269              3,
270              65536,
271              2
272            ]
273          },
274          "eth.type_raw": [
275            "0800",
276            12,
277            2,
278            0,
279            5
280          ]
281        },
282        "ip_raw": [
283          "4500012ca8360000fa11178b00000000ffffffff",
284          14,
285          20,
286          0,
287          1
288        ],
289        "ip": {
290          "ip.version_raw": [
291            "45",
292            14,
293            1,
294            0,
295            4
296          ],
297          "ip.hdr_len_raw": [
298            "45",
299            14,
300            1,
301            0,
302            4
303          ],
304          "ip.dsfield_raw": [
305            "00",
306            15,
307            1,
308            0,
309            4
310          ],
311          "ip.dsfield_tree": {
312            "ip.dsfield.dscp_raw": [
313              "0",
314              15,
315              1,
316              252,
317              4
318            ],
319            "ip.dsfield.ecn_raw": [
320              "0",
321              15,
322              1,
323              3,
324              4
325            ]
326          },
327          "ip.len_raw": [
328            "012c",
329            16,
330            2,
331            0,
332            5
333          ],
334          "ip.id_raw": [
335            "a836",
336            18,
337            2,
338            0,
339            5
340          ],
341          "ip.flags_raw": [
342            "00",
343            20,
344            1,
345            0,
346            4
347          ],
348          "ip.flags_tree": {
349            "ip.flags.rb_raw": [
350              "0",
351              20,
352              1,
353              128,
354              2
355            ],
356            "ip.flags.df_raw": [
357              "0",
358              20,
359              1,
360              64,
361              2
362            ],
363            "ip.flags.mf_raw": [
364              "0",
365              20,
366              1,
367              32,
368              2
369            ]
370          },
371          "ip.frag_offset_raw": [
372            "0",
373            20,
374            2,
375            8191,
376            5
377          ],
378          "ip.ttl_raw": [
379            "fa",
380            22,
381            1,
382            0,
383            4
384          ],
385          "ip.proto_raw": [
386            "11",
387            23,
388            1,
389            0,
390            4
391          ],
392          "ip.checksum_raw": [
393            "178b",
394            24,
395            2,
396            0,
397            5
398          ],
399          "ip.checksum.status_raw": [
400            "",
401            24,
402            0,
403            0,
404            4
405          ],
406          "ip.src_raw": [
407            "00000000",
408            26,
409            4,
410            0,
411            32
412          ],
413          "ip.addr_raw": [
414            "00000000",
415            26,
416            4,
417            0,
418            32
419          ],
420          "ip.src_host_raw": [
421            "00000000",
422            26,
423            4,
424            0,
425            26
426          ],
427          "ip.host_raw": [
428            "00000000",
429            26,
430            4,
431            0,
432            26
433          ],
434          "ip.dst_raw": [
435            "ffffffff",
436            30,
437            4,
438            0,
439            32
440          ],
441          "ip.addr_raw": [
442            "ffffffff",
443            30,
444            4,
445            0,
446            32
447          ],
448          "ip.dst_host_raw": [
449            "ffffffff",
450            30,
451            4,
452            0,
453            26
454          ],
455          "ip.host_raw": [
456            "ffffffff",
457            30,
458            4,
459            0,
460            26
461          ]
462        },
463        "udp_raw": [
464          "004400430118591f",
465          34,
466          8,
467          0,
468          1
469        ],
470        "udp": {
471          "udp.srcport_raw": [
472            "0044",
473            34,
474            2,
475            0,
476            5
477          ],
478          "udp.dstport_raw": [
479            "0043",
480            36,
481            2,
482            0,
483            5
484          ],
485          "udp.port_raw": [
486            "0044",
487            34,
488            2,
489            0,
490            5
491          ],
492          "udp.port_raw": [
493            "0043",
494            36,
495            2,
496            0,
497            5
498          ],
499          "udp.length_raw": [
500            "0118",
501            38,
502            2,
503            0,
504            5
505          ],
506          "udp.checksum_raw": [
507            "591f",
508            40,
509            2,
510            0,
511            5
512          ],
513          "udp.checksum.status_raw": [
514            "",
515            40,
516            0,
517            0,
518            4
519          ],
520          "udp.stream_raw": [
521            "",
522            42,
523            0,
524            0,
525            7
526          ],
527          "Timestamps": {
528            "udp.time_relative_raw": [
529              "",
530              34,
531              0,
532              0,
533              25
534            ],
535            "udp.time_delta_raw": [
536              "",
537              34,
538              0,
539              0,
540              25
541            ]
542          },
543          "udp.payload_raw": [
544            "0101060000003d1d0000000000000000000000000000000000000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501013d0701000b8201fc4232040000000037040103062aff00000000000000",
545            42,
546            272,
547            0,
548            30
549          ]
550        },
551        "dhcp_raw": [
552          "0101060000003d1d0000000000000000000000000000000000000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501013d0701000b8201fc4232040000000037040103062aff00000000000000",
553          42,
554          272,
555          0,
556          1
557        ],
558        "dhcp": {
559          "dhcp.type_raw": [
560            "01",
561            42,
562            1,
563            0,
564            4
565          ],
566          "dhcp.hw.type_raw": [
567            "01",
568            43,
569            1,
570            0,
571            4
572          ],
573          "dhcp.hw.len_raw": [
574            "06",
575            44,
576            1,
577            0,
578            4
579          ],
580          "dhcp.hops_raw": [
581            "00",
582            45,
583            1,
584            0,
585            4
586          ],
587          "dhcp.id_raw": [
588            "00003d1d",
589            46,
590            4,
591            0,
592            7
593          ],
594          "dhcp.secs_raw": [
595            "0000",
596            50,
597            2,
598            0,
599            5
600          ],
601          "dhcp.flags_raw": [
602            "0000",
603            52,
604            2,
605            0,
606            5
607          ],
608          "dhcp.flags_tree": {
609            "dhcp.flags.bc_raw": [
610              "0",
611              52,
612              2,
613              32768,
614              2
615            ],
616            "dhcp.flags.reserved_raw": [
617              "0",
618              52,
619              2,
620              32767,
621              5
622            ]
623          },
624          "dhcp.ip.client_raw": [
625            "00000000",
626            54,
627            4,
628            0,
629            32
630          ],
631          "dhcp.ip.your_raw": [
632            "00000000",
633            58,
634            4,
635            0,
636            32
637          ],
638          "dhcp.ip.server_raw": [
639            "00000000",
640            62,
641            4,
642            0,
643            32
644          ],
645          "dhcp.ip.relay_raw": [
646            "00000000",
647            66,
648            4,
649            0,
650            32
651          ],
652          "dhcp.hw.mac_addr_raw": [
653            "000b8201fc42",
654            70,
655            6,
656            0,
657            29
658          ],
659          "dhcp.hw.addr_padding_raw": [
660            "00000000000000000000",
661            76,
662            10,
663            0,
664            30
665          ],
666          "dhcp.server_raw": [
667            "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
668            86,
669            64,
670            0,
671            26
672          ],
673          "dhcp.file_raw": [
674            "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
675            150,
676            128,
677            0,
678            26
679          ],
680          "dhcp.cookie_raw": [
681            "63825363",
682            278,
683            4,
684            0,
685            32
686          ],
687          "dhcp.option.type_raw": [
688            "350101",
689            282,
690            3,
691            0,
692            4
693          ],
694          "dhcp.option.type_tree": {
695            "dhcp.option.length_raw": [
696              "01",
697              283,
698              1,
699              0,
700              4
701            ],
702            "dhcp.option.value_raw": [
703              "01",
704              284,
705              1,
706              0,
707              30
708            ],
709            "dhcp.option.dhcp_raw": [
710              "01",
711              284,
712              1,
713              0,
714              4
715            ]
716          },
717          "dhcp.option.type_raw": [
718            "3d0701000b8201fc42",
719            285,
720            9,
721            0,
722            4
723          ],
724          "dhcp.option.type_tree": {
725            "dhcp.option.length_raw": [
726              "07",
727              286,
728              1,
729              0,
730              4
731            ],
732            "dhcp.option.value_raw": [
733              "01000b8201fc42",
734              287,
735              7,
736              0,
737              30
738            ],
739            "dhcp.hw.type_raw": [
740              "01",
741              287,
742              1,
743              0,
744              4
745            ],
746            "dhcp.hw.mac_addr_raw": [
747              "000b8201fc42",
748              288,
749              6,
750              0,
751              29
752            ]
753          },
754          "dhcp.option.type_raw": [
755            "320400000000",
756            294,
757            6,
758            0,
759            4
760          ],
761          "dhcp.option.type_tree": {
762            "dhcp.option.length_raw": [
763              "04",
764              295,
765              1,
766              0,
767              4
768            ],
769            "dhcp.option.value_raw": [
770              "00000000",
771              296,
772              4,
773              0,
774              30
775            ],
776            "dhcp.option.requested_ip_address_raw": [
777              "00000000",
778              296,
779              4,
780              0,
781              32
782            ]
783          },
784          "dhcp.option.type_raw": [
785            "37040103062a",
786            300,
787            6,
788            0,
789            4
790          ],
791          "dhcp.option.type_tree": {
792            "dhcp.option.length_raw": [
793              "04",
794              301,
795              1,
796              0,
797              4
798            ],
799            "dhcp.option.value_raw": [
800              "0103062a",
801              302,
802              4,
803              0,
804              30
805            ],
806            "dhcp.option.request_list_item_raw": [
807              "01",
808              302,
809              1,
810              0,
811              4
812            ],
813            "dhcp.option.request_list_item_raw": [
814              "03",
815              303,
816              1,
817              0,
818              4
819            ],
820            "dhcp.option.request_list_item_raw": [
821              "06",
822              304,
823              1,
824              0,
825              4
826            ],
827            "dhcp.option.request_list_item_raw": [
828              "2a",
829              305,
830              1,
831              0,
832              4
833            ]
834          },
835          "dhcp.option.type_raw": [
836            "ff",
837            306,
838            1,
839            0,
840            4
841          ],
842          "dhcp.option.type_tree": {
843            "dhcp.option.end_raw": [
844              "ff",
845              306,
846              1,
847              0,
848              4
849            ]
850          },
851          "dhcp.option.padding_raw": [
852            "00000000000000",
853            307,
854            7,
855            0,
856            30
857          ]
858        }
859      }
860    }
861  },
862  {
863    "_index": "packets-2004-12-05",
864    "_type": "doc",
865    "_score": null,
866    "_source": {
867      "layers": {
868        "frame_raw": [
869          "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",
870          0,
871          342,
872          0,
873          1
874        ],
875        "frame": {
876          "frame.encap_type_raw": [
877            "",
878            0,
879            0,
880            0,
881            13
882          ],
883          "frame.time_raw": [
884            "",
885            0,
886            0,
887            0,
888            24
889          ],
890          "frame.offset_shift_raw": [
891            "",
892            0,
893            0,
894            0,
895            25
896          ],
897          "frame.time_epoch_raw": [
898            "",
899            0,
900            0,
901            0,
902            25
903          ],
904          "frame.time_delta_raw": [
905            "",
906            0,
907            0,
908            0,
909            25
910          ],
911          "frame.time_delta_displayed_raw": [
912            "",
913            0,
914            0,
915            0,
916            25
917          ],
918          "frame.time_relative_raw": [
919            "",
920            0,
921            0,
922            0,
923            25
924          ],
925          "frame.number_raw": [
926            "",
927            0,
928            0,
929            0,
930            7
931          ],
932          "frame.len_raw": [
933            "",
934            0,
935            0,
936            0,
937            7
938          ],
939          "frame.cap_len_raw": [
940            "",
941            0,
942            0,
943            0,
944            7
945          ],
946          "frame.marked_raw": [
947            "",
948            0,
949            0,
950            0,
951            2
952          ],
953          "frame.ignored_raw": [
954            "",
955            0,
956            0,
957            0,
958            2
959          ],
960          "frame.protocols_raw": [
961            "",
962            0,
963            0,
964            0,
965            26
966          ]
967        },
968        "eth_raw": [
969          "000b8201fc42000874adf19b0800",
970          0,
971          14,
972          0,
973          1
974        ],
975        "eth": {
976          "eth.dst_raw": [
977            "000b8201fc42",
978            0,
979            6,
980            0,
981            29
982          ],
983          "eth.dst_tree": {
984            "eth.dst_resolved_raw": [
985              "000b8201fc42",
986              0,
987              6,
988              0,
989              26
990            ],
991            "eth.dst.oui_raw": [
992              "000b82",
993              0,
994              3,
995              0,
996              6
997            ],
998            "eth.dst.oui_resolved_raw": [
999              "000b8201fc42",
1000              0,
1001              6,
1002              0,
1003              26
1004            ],
1005            "eth.addr_raw": [
1006              "000b8201fc42",
1007              0,
1008              6,
1009              0,
1010              29
1011            ],
1012            "eth.addr_resolved_raw": [
1013              "000b8201fc42",
1014              0,
1015              6,
1016              0,
1017              26
1018            ],
1019            "eth.addr.oui_raw": [
1020              "000b82",
1021              0,
1022              3,
1023              0,
1024              6
1025            ],
1026            "eth.addr.oui_resolved_raw": [
1027              "000b8201fc42",
1028              0,
1029              6,
1030              0,
1031              26
1032            ],
1033            "eth.dst.lg_raw": [
1034              "0",
1035              0,
1036              3,
1037              131072,
1038              2
1039            ],
1040            "eth.lg_raw": [
1041              "0",
1042              0,
1043              3,
1044              131072,
1045              2
1046            ],
1047            "eth.dst.ig_raw": [
1048              "0",
1049              0,
1050              3,
1051              65536,
1052              2
1053            ],
1054            "eth.ig_raw": [
1055              "0",
1056              0,
1057              3,
1058              65536,
1059              2
1060            ]
1061          },
1062          "eth.src_raw": [
1063            "000874adf19b",
1064            6,
1065            6,
1066            0,
1067            29
1068          ],
1069          "eth.src_tree": {
1070            "eth.src_resolved_raw": [
1071              "000874adf19b",
1072              6,
1073              6,
1074              0,
1075              26
1076            ],
1077            "eth.src.oui_raw": [
1078              "000874",
1079              6,
1080              3,
1081              0,
1082              6
1083            ],
1084            "eth.src.oui_resolved_raw": [
1085              "000874adf19b",
1086              6,
1087              6,
1088              0,
1089              26
1090            ],
1091            "eth.addr_raw": [
1092              "000874adf19b",
1093              6,
1094              6,
1095              0,
1096              29
1097            ],
1098            "eth.addr_resolved_raw": [
1099              "000874adf19b",
1100              6,
1101              6,
1102              0,
1103              26
1104            ],
1105            "eth.addr.oui_raw": [
1106              "000874",
1107              6,
1108              3,
1109              0,
1110              6
1111            ],
1112            "eth.addr.oui_resolved_raw": [
1113              "000874adf19b",
1114              6,
1115              6,
1116              0,
1117              26
1118            ],
1119            "eth.src.lg_raw": [
1120              "0",
1121              6,
1122              3,
1123              131072,
1124              2
1125            ],
1126            "eth.lg_raw": [
1127              "0",
1128              6,
1129              3,
1130              131072,
1131              2
1132            ],
1133            "eth.src.ig_raw": [
1134              "0",
1135              6,
1136              3,
1137              65536,
1138              2
1139            ],
1140            "eth.ig_raw": [
1141              "0",
1142              6,
1143              3,
1144              65536,
1145              2
1146            ]
1147          },
1148          "eth.type_raw": [
1149            "0800",
1150            12,
1151            2,
1152            0,
1153            5
1154          ]
1155        },
1156        "ip_raw": [
1157          "450001480445000080110000c0a80001c0a8000a",
1158          14,
1159          20,
1160          0,
1161          1
1162        ],
1163        "ip": {
1164          "ip.version_raw": [
1165            "45",
1166            14,
1167            1,
1168            0,
1169            4
1170          ],
1171          "ip.hdr_len_raw": [
1172            "45",
1173            14,
1174            1,
1175            0,
1176            4
1177          ],
1178          "ip.dsfield_raw": [
1179            "00",
1180            15,
1181            1,
1182            0,
1183            4
1184          ],
1185          "ip.dsfield_tree": {
1186            "ip.dsfield.dscp_raw": [
1187              "0",
1188              15,
1189              1,
1190              252,
1191              4
1192            ],
1193            "ip.dsfield.ecn_raw": [
1194              "0",
1195              15,
1196              1,
1197              3,
1198              4
1199            ]
1200          },
1201          "ip.len_raw": [
1202            "0148",
1203            16,
1204            2,
1205            0,
1206            5
1207          ],
1208          "ip.id_raw": [
1209            "0445",
1210            18,
1211            2,
1212            0,
1213            5
1214          ],
1215          "ip.flags_raw": [
1216            "00",
1217            20,
1218            1,
1219            0,
1220            4
1221          ],
1222          "ip.flags_tree": {
1223            "ip.flags.rb_raw": [
1224              "0",
1225              20,
1226              1,
1227              128,
1228              2
1229            ],
1230            "ip.flags.df_raw": [
1231              "0",
1232              20,
1233              1,
1234              64,
1235              2
1236            ],
1237            "ip.flags.mf_raw": [
1238              "0",
1239              20,
1240              1,
1241              32,
1242              2
1243            ]
1244          },
1245          "ip.frag_offset_raw": [
1246            "0",
1247            20,
1248            2,
1249            8191,
1250            5
1251          ],
1252          "ip.ttl_raw": [
1253            "80",
1254            22,
1255            1,
1256            0,
1257            4
1258          ],
1259          "ip.proto_raw": [
1260            "11",
1261            23,
1262            1,
1263            0,
1264            4
1265          ],
1266          "ip.checksum_raw": [
1267            "0000",
1268            24,
1269            2,
1270            0,
1271            5
1272          ],
1273          "ip.checksum.status_raw": [
1274            "",
1275            24,
1276            0,
1277            0,
1278            4
1279          ],
1280          "ip.src_raw": [
1281            "c0a80001",
1282            26,
1283            4,
1284            0,
1285            32
1286          ],
1287          "ip.addr_raw": [
1288            "c0a80001",
1289            26,
1290            4,
1291            0,
1292            32
1293          ],
1294          "ip.src_host_raw": [
1295            "c0a80001",
1296            26,
1297            4,
1298            0,
1299            26
1300          ],
1301          "ip.host_raw": [
1302            "c0a80001",
1303            26,
1304            4,
1305            0,
1306            26
1307          ],
1308          "ip.dst_raw": [
1309            "c0a8000a",
1310            30,
1311            4,
1312            0,
1313            32
1314          ],
1315          "ip.addr_raw": [
1316            "c0a8000a",
1317            30,
1318            4,
1319            0,
1320            32
1321          ],
1322          "ip.dst_host_raw": [
1323            "c0a8000a",
1324            30,
1325            4,
1326            0,
1327            26
1328          ],
1329          "ip.host_raw": [
1330            "c0a8000a",
1331            30,
1332            4,
1333            0,
1334            26
1335          ]
1336        },
1337        "udp_raw": [
1338          "0043004401342233",
1339          34,
1340          8,
1341          0,
1342          1
1343        ],
1344        "udp": {
1345          "udp.srcport_raw": [
1346            "0043",
1347            34,
1348            2,
1349            0,
1350            5
1351          ],
1352          "udp.dstport_raw": [
1353            "0044",
1354            36,
1355            2,
1356            0,
1357            5
1358          ],
1359          "udp.port_raw": [
1360            "0043",
1361            34,
1362            2,
1363            0,
1364            5
1365          ],
1366          "udp.port_raw": [
1367            "0044",
1368            36,
1369            2,
1370            0,
1371            5
1372          ],
1373          "udp.length_raw": [
1374            "0134",
1375            38,
1376            2,
1377            0,
1378            5
1379          ],
1380          "udp.checksum_raw": [
1381            "2233",
1382            40,
1383            2,
1384            0,
1385            5
1386          ],
1387          "udp.checksum.status_raw": [
1388            "",
1389            40,
1390            0,
1391            0,
1392            4
1393          ],
1394          "udp.stream_raw": [
1395            "",
1396            42,
1397            0,
1398            0,
1399            7
1400          ],
1401          "Timestamps": {
1402            "udp.time_relative_raw": [
1403              "",
1404              34,
1405              0,
1406              0,
1407              25
1408            ],
1409            "udp.time_delta_raw": [
1410              "",
1411              34,
1412              0,
1413              0,
1414              25
1415            ]
1416          },
1417          "udp.payload_raw": [
1418            "0201060000003d1d0000000000000000c0a8000ac0a8000100000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501020104ffffff003a04000007083b0400000c4e330400000e103604c0a80001ff0000000000000000000000000000000000000000000000000000",
1419            42,
1420            300,
1421            0,
1422            30
1423          ]
1424        },
1425        "dhcp_raw": [
1426          "0201060000003d1d0000000000000000c0a8000ac0a8000100000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501020104ffffff003a04000007083b0400000c4e330400000e103604c0a80001ff0000000000000000000000000000000000000000000000000000",
1427          42,
1428          300,
1429          0,
1430          1
1431        ],
1432        "dhcp": {
1433          "dhcp.type_raw": [
1434            "02",
1435            42,
1436            1,
1437            0,
1438            4
1439          ],
1440          "dhcp.hw.type_raw": [
1441            "01",
1442            43,
1443            1,
1444            0,
1445            4
1446          ],
1447          "dhcp.hw.len_raw": [
1448            "06",
1449            44,
1450            1,
1451            0,
1452            4
1453          ],
1454          "dhcp.hops_raw": [
1455            "00",
1456            45,
1457            1,
1458            0,
1459            4
1460          ],
1461          "dhcp.id_raw": [
1462            "00003d1d",
1463            46,
1464            4,
1465            0,
1466            7
1467          ],
1468          "dhcp.secs_raw": [
1469            "0000",
1470            50,
1471            2,
1472            0,
1473            5
1474          ],
1475          "dhcp.flags_raw": [
1476            "0000",
1477            52,
1478            2,
1479            0,
1480            5
1481          ],
1482          "dhcp.flags_tree": {
1483            "dhcp.flags.bc_raw": [
1484              "0",
1485              52,
1486              2,
1487              32768,
1488              2
1489            ],
1490            "dhcp.flags.reserved_raw": [
1491              "0",
1492              52,
1493              2,
1494              32767,
1495              5
1496            ]
1497          },
1498          "dhcp.ip.client_raw": [
1499            "00000000",
1500            54,
1501            4,
1502            0,
1503            32
1504          ],
1505          "dhcp.ip.your_raw": [
1506            "c0a8000a",
1507            58,
1508            4,
1509            0,
1510            32
1511          ],
1512          "dhcp.ip.server_raw": [
1513            "c0a80001",
1514            62,
1515            4,
1516            0,
1517            32
1518          ],
1519          "dhcp.ip.relay_raw": [
1520            "00000000",
1521            66,
1522            4,
1523            0,
1524            32
1525          ],
1526          "dhcp.hw.mac_addr_raw": [
1527            "000b8201fc42",
1528            70,
1529            6,
1530            0,
1531            29
1532          ],
1533          "dhcp.hw.addr_padding_raw": [
1534            "00000000000000000000",
1535            76,
1536            10,
1537            0,
1538            30
1539          ],
1540          "dhcp.server_raw": [
1541            "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
1542            86,
1543            64,
1544            0,
1545            26
1546          ],
1547          "dhcp.file_raw": [
1548            "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
1549            150,
1550            128,
1551            0,
1552            26
1553          ],
1554          "dhcp.cookie_raw": [
1555            "63825363",
1556            278,
1557            4,
1558            0,
1559            32
1560          ],
1561          "dhcp.option.type_raw": [
1562            "350102",
1563            282,
1564            3,
1565            0,
1566            4
1567          ],
1568          "dhcp.option.type_tree": {
1569            "dhcp.option.length_raw": [
1570              "01",
1571              283,
1572              1,
1573              0,
1574              4
1575            ],
1576            "dhcp.option.value_raw": [
1577              "02",
1578              284,
1579              1,
1580              0,
1581              30
1582            ],
1583            "dhcp.option.dhcp_raw": [
1584              "02",
1585              284,
1586              1,
1587              0,
1588              4
1589            ]
1590          },
1591          "dhcp.option.type_raw": [
1592            "0104ffffff00",
1593            285,
1594            6,
1595            0,
1596            4
1597          ],
1598          "dhcp.option.type_tree": {
1599            "dhcp.option.length_raw": [
1600              "04",
1601              286,
1602              1,
1603              0,
1604              4
1605            ],
1606            "dhcp.option.value_raw": [
1607              "ffffff00",
1608              287,
1609              4,
1610              0,
1611              30
1612            ],
1613            "dhcp.option.subnet_mask_raw": [
1614              "ffffff00",
1615              287,
1616              4,
1617              0,
1618              32
1619            ]
1620          },
1621          "dhcp.option.type_raw": [
1622            "3a0400000708",
1623            291,
1624            6,
1625            0,
1626            4
1627          ],
1628          "dhcp.option.type_tree": {
1629            "dhcp.option.length_raw": [
1630              "04",
1631              292,
1632              1,
1633              0,
1634              4
1635            ],
1636            "dhcp.option.value_raw": [
1637              "00000708",
1638              293,
1639              4,
1640              0,
1641              30
1642            ],
1643            "dhcp.option.renewal_time_value_raw": [
1644              "00000708",
1645              293,
1646              4,
1647              0,
1648              7
1649            ]
1650          },
1651          "dhcp.option.type_raw": [
1652            "3b0400000c4e",
1653            297,
1654            6,
1655            0,
1656            4
1657          ],
1658          "dhcp.option.type_tree": {
1659            "dhcp.option.length_raw": [
1660              "04",
1661              298,
1662              1,
1663              0,
1664              4
1665            ],
1666            "dhcp.option.value_raw": [
1667              "00000c4e",
1668              299,
1669              4,
1670              0,
1671              30
1672            ],
1673            "dhcp.option.rebinding_time_value_raw": [
1674              "00000c4e",
1675              299,
1676              4,
1677              0,
1678              7
1679            ]
1680          },
1681          "dhcp.option.type_raw": [
1682            "330400000e10",
1683            303,
1684            6,
1685            0,
1686            4
1687          ],
1688          "dhcp.option.type_tree": {
1689            "dhcp.option.length_raw": [
1690              "04",
1691              304,
1692              1,
1693              0,
1694              4
1695            ],
1696            "dhcp.option.value_raw": [
1697              "00000e10",
1698              305,
1699              4,
1700              0,
1701              30
1702            ],
1703            "dhcp.option.ip_address_lease_time_raw": [
1704              "00000e10",
1705              305,
1706              4,
1707              0,
1708              7
1709            ]
1710          },
1711          "dhcp.option.type_raw": [
1712            "3604c0a80001",
1713            309,
1714            6,
1715            0,
1716            4
1717          ],
1718          "dhcp.option.type_tree": {
1719            "dhcp.option.length_raw": [
1720              "04",
1721              310,
1722              1,
1723              0,
1724              4
1725            ],
1726            "dhcp.option.value_raw": [
1727              "c0a80001",
1728              311,
1729              4,
1730              0,
1731              30
1732            ],
1733            "dhcp.option.dhcp_server_id_raw": [
1734              "c0a80001",
1735              311,
1736              4,
1737              0,
1738              32
1739            ]
1740          },
1741          "dhcp.option.type_raw": [
1742            "ff",
1743            315,
1744            1,
1745            0,
1746            4
1747          ],
1748          "dhcp.option.type_tree": {
1749            "dhcp.option.end_raw": [
1750              "ff",
1751              315,
1752              1,
1753              0,
1754              4
1755            ]
1756          },
1757          "dhcp.option.padding_raw": [
1758            "0000000000000000000000000000000000000000000000000000",
1759            316,
1760            26,
1761            0,
1762            30
1763          ]
1764        }
1765      }
1766    }
1767  },
1768  {
1769    "_index": "packets-2004-12-05",
1770    "_type": "doc",
1771    "_score": null,
1772    "_source": {
1773      "layers": {
1774        "frame_raw": [
1775          "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",
1776          0,
1777          314,
1778          0,
1779          1
1780        ],
1781        "frame": {
1782          "frame.encap_type_raw": [
1783            "",
1784            0,
1785            0,
1786            0,
1787            13
1788          ],
1789          "frame.time_raw": [
1790            "",
1791            0,
1792            0,
1793            0,
1794            24
1795          ],
1796          "frame.offset_shift_raw": [
1797            "",
1798            0,
1799            0,
1800            0,
1801            25
1802          ],
1803          "frame.time_epoch_raw": [
1804            "",
1805            0,
1806            0,
1807            0,
1808            25
1809          ],
1810          "frame.time_delta_raw": [
1811            "",
1812            0,
1813            0,
1814            0,
1815            25
1816          ],
1817          "frame.time_delta_displayed_raw": [
1818            "",
1819            0,
1820            0,
1821            0,
1822            25
1823          ],
1824          "frame.time_relative_raw": [
1825            "",
1826            0,
1827            0,
1828            0,
1829            25
1830          ],
1831          "frame.number_raw": [
1832            "",
1833            0,
1834            0,
1835            0,
1836            7
1837          ],
1838          "frame.len_raw": [
1839            "",
1840            0,
1841            0,
1842            0,
1843            7
1844          ],
1845          "frame.cap_len_raw": [
1846            "",
1847            0,
1848            0,
1849            0,
1850            7
1851          ],
1852          "frame.marked_raw": [
1853            "",
1854            0,
1855            0,
1856            0,
1857            2
1858          ],
1859          "frame.ignored_raw": [
1860            "",
1861            0,
1862            0,
1863            0,
1864            2
1865          ],
1866          "frame.protocols_raw": [
1867            "",
1868            0,
1869            0,
1870            0,
1871            26
1872          ]
1873        },
1874        "eth_raw": [
1875          "ffffffffffff000b8201fc420800",
1876          0,
1877          14,
1878          0,
1879          1
1880        ],
1881        "eth": {
1882          "eth.dst_raw": [
1883            "ffffffffffff",
1884            0,
1885            6,
1886            0,
1887            29
1888          ],
1889          "eth.dst_tree": {
1890            "eth.dst_resolved_raw": [
1891              "ffffffffffff",
1892              0,
1893              6,
1894              0,
1895              26
1896            ],
1897            "eth.dst.oui_raw": [
1898              "ffffff",
1899              0,
1900              3,
1901              0,
1902              6
1903            ],
1904            "eth.addr_raw": [
1905              "ffffffffffff",
1906              0,
1907              6,
1908              0,
1909              29
1910            ],
1911            "eth.addr_resolved_raw": [
1912              "ffffffffffff",
1913              0,
1914              6,
1915              0,
1916              26
1917            ],
1918            "eth.addr.oui_raw": [
1919              "ffffff",
1920              0,
1921              3,
1922              0,
1923              6
1924            ],
1925            "eth.dst.lg_raw": [
1926              "1",
1927              0,
1928              3,
1929              131072,
1930              2
1931            ],
1932            "eth.lg_raw": [
1933              "1",
1934              0,
1935              3,
1936              131072,
1937              2
1938            ],
1939            "eth.dst.ig_raw": [
1940              "1",
1941              0,
1942              3,
1943              65536,
1944              2
1945            ],
1946            "eth.ig_raw": [
1947              "1",
1948              0,
1949              3,
1950              65536,
1951              2
1952            ]
1953          },
1954          "eth.src_raw": [
1955            "000b8201fc42",
1956            6,
1957            6,
1958            0,
1959            29
1960          ],
1961          "eth.src_tree": {
1962            "eth.src_resolved_raw": [
1963              "000b8201fc42",
1964              6,
1965              6,
1966              0,
1967              26
1968            ],
1969            "eth.src.oui_raw": [
1970              "000b82",
1971              6,
1972              3,
1973              0,
1974              6
1975            ],
1976            "eth.src.oui_resolved_raw": [
1977              "000b8201fc42",
1978              6,
1979              6,
1980              0,
1981              26
1982            ],
1983            "eth.addr_raw": [
1984              "000b8201fc42",
1985              6,
1986              6,
1987              0,
1988              29
1989            ],
1990            "eth.addr_resolved_raw": [
1991              "000b8201fc42",
1992              6,
1993              6,
1994              0,
1995              26
1996            ],
1997            "eth.addr.oui_raw": [
1998              "000b82",
1999              6,
2000              3,
2001              0,
2002              6
2003            ],
2004            "eth.addr.oui_resolved_raw": [
2005              "000b8201fc42",
2006              6,
2007              6,
2008              0,
2009              26
2010            ],
2011            "eth.src.lg_raw": [
2012              "0",
2013              6,
2014              3,
2015              131072,
2016              2
2017            ],
2018            "eth.lg_raw": [
2019              "0",
2020              6,
2021              3,
2022              131072,
2023              2
2024            ],
2025            "eth.src.ig_raw": [
2026              "0",
2027              6,
2028              3,
2029              65536,
2030              2
2031            ],
2032            "eth.ig_raw": [
2033              "0",
2034              6,
2035              3,
2036              65536,
2037              2
2038            ]
2039          },
2040          "eth.type_raw": [
2041            "0800",
2042            12,
2043            2,
2044            0,
2045            5
2046          ]
2047        },
2048        "ip_raw": [
2049          "4500012ca8370000fa11178a00000000ffffffff",
2050          14,
2051          20,
2052          0,
2053          1
2054        ],
2055        "ip": {
2056          "ip.version_raw": [
2057            "45",
2058            14,
2059            1,
2060            0,
2061            4
2062          ],
2063          "ip.hdr_len_raw": [
2064            "45",
2065            14,
2066            1,
2067            0,
2068            4
2069          ],
2070          "ip.dsfield_raw": [
2071            "00",
2072            15,
2073            1,
2074            0,
2075            4
2076          ],
2077          "ip.dsfield_tree": {
2078            "ip.dsfield.dscp_raw": [
2079              "0",
2080              15,
2081              1,
2082              252,
2083              4
2084            ],
2085            "ip.dsfield.ecn_raw": [
2086              "0",
2087              15,
2088              1,
2089              3,
2090              4
2091            ]
2092          },
2093          "ip.len_raw": [
2094            "012c",
2095            16,
2096            2,
2097            0,
2098            5
2099          ],
2100          "ip.id_raw": [
2101            "a837",
2102            18,
2103            2,
2104            0,
2105            5
2106          ],
2107          "ip.flags_raw": [
2108            "00",
2109            20,
2110            1,
2111            0,
2112            4
2113          ],
2114          "ip.flags_tree": {
2115            "ip.flags.rb_raw": [
2116              "0",
2117              20,
2118              1,
2119              128,
2120              2
2121            ],
2122            "ip.flags.df_raw": [
2123              "0",
2124              20,
2125              1,
2126              64,
2127              2
2128            ],
2129            "ip.flags.mf_raw": [
2130              "0",
2131              20,
2132              1,
2133              32,
2134              2
2135            ]
2136          },
2137          "ip.frag_offset_raw": [
2138            "0",
2139            20,
2140            2,
2141            8191,
2142            5
2143          ],
2144          "ip.ttl_raw": [
2145            "fa",
2146            22,
2147            1,
2148            0,
2149            4
2150          ],
2151          "ip.proto_raw": [
2152            "11",
2153            23,
2154            1,
2155            0,
2156            4
2157          ],
2158          "ip.checksum_raw": [
2159            "178a",
2160            24,
2161            2,
2162            0,
2163            5
2164          ],
2165          "ip.checksum.status_raw": [
2166            "",
2167            24,
2168            0,
2169            0,
2170            4
2171          ],
2172          "ip.src_raw": [
2173            "00000000",
2174            26,
2175            4,
2176            0,
2177            32
2178          ],
2179          "ip.addr_raw": [
2180            "00000000",
2181            26,
2182            4,
2183            0,
2184            32
2185          ],
2186          "ip.src_host_raw": [
2187            "00000000",
2188            26,
2189            4,
2190            0,
2191            26
2192          ],
2193          "ip.host_raw": [
2194            "00000000",
2195            26,
2196            4,
2197            0,
2198            26
2199          ],
2200          "ip.dst_raw": [
2201            "ffffffff",
2202            30,
2203            4,
2204            0,
2205            32
2206          ],
2207          "ip.addr_raw": [
2208            "ffffffff",
2209            30,
2210            4,
2211            0,
2212            32
2213          ],
2214          "ip.dst_host_raw": [
2215            "ffffffff",
2216            30,
2217            4,
2218            0,
2219            26
2220          ],
2221          "ip.host_raw": [
2222            "ffffffff",
2223            30,
2224            4,
2225            0,
2226            26
2227          ]
2228        },
2229        "udp_raw": [
2230          "0044004301189fbd",
2231          34,
2232          8,
2233          0,
2234          1
2235        ],
2236        "udp": {
2237          "udp.srcport_raw": [
2238            "0044",
2239            34,
2240            2,
2241            0,
2242            5
2243          ],
2244          "udp.dstport_raw": [
2245            "0043",
2246            36,
2247            2,
2248            0,
2249            5
2250          ],
2251          "udp.port_raw": [
2252            "0044",
2253            34,
2254            2,
2255            0,
2256            5
2257          ],
2258          "udp.port_raw": [
2259            "0043",
2260            36,
2261            2,
2262            0,
2263            5
2264          ],
2265          "udp.length_raw": [
2266            "0118",
2267            38,
2268            2,
2269            0,
2270            5
2271          ],
2272          "udp.checksum_raw": [
2273            "9fbd",
2274            40,
2275            2,
2276            0,
2277            5
2278          ],
2279          "udp.checksum.status_raw": [
2280            "",
2281            40,
2282            0,
2283            0,
2284            4
2285          ],
2286          "udp.stream_raw": [
2287            "",
2288            42,
2289            0,
2290            0,
2291            7
2292          ],
2293          "Timestamps": {
2294            "udp.time_relative_raw": [
2295              "",
2296              34,
2297              0,
2298              0,
2299              25
2300            ],
2301            "udp.time_delta_raw": [
2302              "",
2303              34,
2304              0,
2305              0,
2306              25
2307            ]
2308          },
2309          "udp.payload_raw": [
2310            "0101060000003d1e0000000000000000000000000000000000000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501033d0701000b8201fc423204c0a8000a3604c0a8000137040103062aff00",
2311            42,
2312            272,
2313            0,
2314            30
2315          ]
2316        },
2317        "dhcp_raw": [
2318          "0101060000003d1e0000000000000000000000000000000000000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501033d0701000b8201fc423204c0a8000a3604c0a8000137040103062aff00",
2319          42,
2320          272,
2321          0,
2322          1
2323        ],
2324        "dhcp": {
2325          "dhcp.type_raw": [
2326            "01",
2327            42,
2328            1,
2329            0,
2330            4
2331          ],
2332          "dhcp.hw.type_raw": [
2333            "01",
2334            43,
2335            1,
2336            0,
2337            4
2338          ],
2339          "dhcp.hw.len_raw": [
2340            "06",
2341            44,
2342            1,
2343            0,
2344            4
2345          ],
2346          "dhcp.hops_raw": [
2347            "00",
2348            45,
2349            1,
2350            0,
2351            4
2352          ],
2353          "dhcp.id_raw": [
2354            "00003d1e",
2355            46,
2356            4,
2357            0,
2358            7
2359          ],
2360          "dhcp.secs_raw": [
2361            "0000",
2362            50,
2363            2,
2364            0,
2365            5
2366          ],
2367          "dhcp.flags_raw": [
2368            "0000",
2369            52,
2370            2,
2371            0,
2372            5
2373          ],
2374          "dhcp.flags_tree": {
2375            "dhcp.flags.bc_raw": [
2376              "0",
2377              52,
2378              2,
2379              32768,
2380              2
2381            ],
2382            "dhcp.flags.reserved_raw": [
2383              "0",
2384              52,
2385              2,
2386              32767,
2387              5
2388            ]
2389          },
2390          "dhcp.ip.client_raw": [
2391            "00000000",
2392            54,
2393            4,
2394            0,
2395            32
2396          ],
2397          "dhcp.ip.your_raw": [
2398            "00000000",
2399            58,
2400            4,
2401            0,
2402            32
2403          ],
2404          "dhcp.ip.server_raw": [
2405            "00000000",
2406            62,
2407            4,
2408            0,
2409            32
2410          ],
2411          "dhcp.ip.relay_raw": [
2412            "00000000",
2413            66,
2414            4,
2415            0,
2416            32
2417          ],
2418          "dhcp.hw.mac_addr_raw": [
2419            "000b8201fc42",
2420            70,
2421            6,
2422            0,
2423            29
2424          ],
2425          "dhcp.hw.addr_padding_raw": [
2426            "00000000000000000000",
2427            76,
2428            10,
2429            0,
2430            30
2431          ],
2432          "dhcp.server_raw": [
2433            "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
2434            86,
2435            64,
2436            0,
2437            26
2438          ],
2439          "dhcp.file_raw": [
2440            "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
2441            150,
2442            128,
2443            0,
2444            26
2445          ],
2446          "dhcp.cookie_raw": [
2447            "63825363",
2448            278,
2449            4,
2450            0,
2451            32
2452          ],
2453          "dhcp.option.type_raw": [
2454            "350103",
2455            282,
2456            3,
2457            0,
2458            4
2459          ],
2460          "dhcp.option.type_tree": {
2461            "dhcp.option.length_raw": [
2462              "01",
2463              283,
2464              1,
2465              0,
2466              4
2467            ],
2468            "dhcp.option.value_raw": [
2469              "03",
2470              284,
2471              1,
2472              0,
2473              30
2474            ],
2475            "dhcp.option.dhcp_raw": [
2476              "03",
2477              284,
2478              1,
2479              0,
2480              4
2481            ]
2482          },
2483          "dhcp.option.type_raw": [
2484            "3d0701000b8201fc42",
2485            285,
2486            9,
2487            0,
2488            4
2489          ],
2490          "dhcp.option.type_tree": {
2491            "dhcp.option.length_raw": [
2492              "07",
2493              286,
2494              1,
2495              0,
2496              4
2497            ],
2498            "dhcp.option.value_raw": [
2499              "01000b8201fc42",
2500              287,
2501              7,
2502              0,
2503              30
2504            ],
2505            "dhcp.hw.type_raw": [
2506              "01",
2507              287,
2508              1,
2509              0,
2510              4
2511            ],
2512            "dhcp.hw.mac_addr_raw": [
2513              "000b8201fc42",
2514              288,
2515              6,
2516              0,
2517              29
2518            ]
2519          },
2520          "dhcp.option.type_raw": [
2521            "3204c0a8000a",
2522            294,
2523            6,
2524            0,
2525            4
2526          ],
2527          "dhcp.option.type_tree": {
2528            "dhcp.option.length_raw": [
2529              "04",
2530              295,
2531              1,
2532              0,
2533              4
2534            ],
2535            "dhcp.option.value_raw": [
2536              "c0a8000a",
2537              296,
2538              4,
2539              0,
2540              30
2541            ],
2542            "dhcp.option.requested_ip_address_raw": [
2543              "c0a8000a",
2544              296,
2545              4,
2546              0,
2547              32
2548            ]
2549          },
2550          "dhcp.option.type_raw": [
2551            "3604c0a80001",
2552            300,
2553            6,
2554            0,
2555            4
2556          ],
2557          "dhcp.option.type_tree": {
2558            "dhcp.option.length_raw": [
2559              "04",
2560              301,
2561              1,
2562              0,
2563              4
2564            ],
2565            "dhcp.option.value_raw": [
2566              "c0a80001",
2567              302,
2568              4,
2569              0,
2570              30
2571            ],
2572            "dhcp.option.dhcp_server_id_raw": [
2573              "c0a80001",
2574              302,
2575              4,
2576              0,
2577              32
2578            ]
2579          },
2580          "dhcp.option.type_raw": [
2581            "37040103062a",
2582            306,
2583            6,
2584            0,
2585            4
2586          ],
2587          "dhcp.option.type_tree": {
2588            "dhcp.option.length_raw": [
2589              "04",
2590              307,
2591              1,
2592              0,
2593              4
2594            ],
2595            "dhcp.option.value_raw": [
2596              "0103062a",
2597              308,
2598              4,
2599              0,
2600              30
2601            ],
2602            "dhcp.option.request_list_item_raw": [
2603              "01",
2604              308,
2605              1,
2606              0,
2607              4
2608            ],
2609            "dhcp.option.request_list_item_raw": [
2610              "03",
2611              309,
2612              1,
2613              0,
2614              4
2615            ],
2616            "dhcp.option.request_list_item_raw": [
2617              "06",
2618              310,
2619              1,
2620              0,
2621              4
2622            ],
2623            "dhcp.option.request_list_item_raw": [
2624              "2a",
2625              311,
2626              1,
2627              0,
2628              4
2629            ]
2630          },
2631          "dhcp.option.type_raw": [
2632            "ff",
2633            312,
2634            1,
2635            0,
2636            4
2637          ],
2638          "dhcp.option.type_tree": {
2639            "dhcp.option.end_raw": [
2640              "ff",
2641              312,
2642              1,
2643              0,
2644              4
2645            ]
2646          },
2647          "dhcp.option.padding_raw": [
2648            "00",
2649            313,
2650            1,
2651            0,
2652            30
2653          ]
2654        }
2655      }
2656    }
2657  },
2658  {
2659    "_index": "packets-2004-12-05",
2660    "_type": "doc",
2661    "_score": null,
2662    "_source": {
2663      "layers": {
2664        "frame_raw": [
2665          "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",
2666          0,
2667          342,
2668          0,
2669          1
2670        ],
2671        "frame": {
2672          "frame.encap_type_raw": [
2673            "",
2674            0,
2675            0,
2676            0,
2677            13
2678          ],
2679          "frame.time_raw": [
2680            "",
2681            0,
2682            0,
2683            0,
2684            24
2685          ],
2686          "frame.offset_shift_raw": [
2687            "",
2688            0,
2689            0,
2690            0,
2691            25
2692          ],
2693          "frame.time_epoch_raw": [
2694            "",
2695            0,
2696            0,
2697            0,
2698            25
2699          ],
2700          "frame.time_delta_raw": [
2701            "",
2702            0,
2703            0,
2704            0,
2705            25
2706          ],
2707          "frame.time_delta_displayed_raw": [
2708            "",
2709            0,
2710            0,
2711            0,
2712            25
2713          ],
2714          "frame.time_relative_raw": [
2715            "",
2716            0,
2717            0,
2718            0,
2719            25
2720          ],
2721          "frame.number_raw": [
2722            "",
2723            0,
2724            0,
2725            0,
2726            7
2727          ],
2728          "frame.len_raw": [
2729            "",
2730            0,
2731            0,
2732            0,
2733            7
2734          ],
2735          "frame.cap_len_raw": [
2736            "",
2737            0,
2738            0,
2739            0,
2740            7
2741          ],
2742          "frame.marked_raw": [
2743            "",
2744            0,
2745            0,
2746            0,
2747            2
2748          ],
2749          "frame.ignored_raw": [
2750            "",
2751            0,
2752            0,
2753            0,
2754            2
2755          ],
2756          "frame.protocols_raw": [
2757            "",
2758            0,
2759            0,
2760            0,
2761            26
2762          ]
2763        },
2764        "eth_raw": [
2765          "000b8201fc42000874adf19b0800",
2766          0,
2767          14,
2768          0,
2769          1
2770        ],
2771        "eth": {
2772          "eth.dst_raw": [
2773            "000b8201fc42",
2774            0,
2775            6,
2776            0,
2777            29
2778          ],
2779          "eth.dst_tree": {
2780            "eth.dst_resolved_raw": [
2781              "000b8201fc42",
2782              0,
2783              6,
2784              0,
2785              26
2786            ],
2787            "eth.dst.oui_raw": [
2788              "000b82",
2789              0,
2790              3,
2791              0,
2792              6
2793            ],
2794            "eth.dst.oui_resolved_raw": [
2795              "000b8201fc42",
2796              0,
2797              6,
2798              0,
2799              26
2800            ],
2801            "eth.addr_raw": [
2802              "000b8201fc42",
2803              0,
2804              6,
2805              0,
2806              29
2807            ],
2808            "eth.addr_resolved_raw": [
2809              "000b8201fc42",
2810              0,
2811              6,
2812              0,
2813              26
2814            ],
2815            "eth.addr.oui_raw": [
2816              "000b82",
2817              0,
2818              3,
2819              0,
2820              6
2821            ],
2822            "eth.addr.oui_resolved_raw": [
2823              "000b8201fc42",
2824              0,
2825              6,
2826              0,
2827              26
2828            ],
2829            "eth.dst.lg_raw": [
2830              "0",
2831              0,
2832              3,
2833              131072,
2834              2
2835            ],
2836            "eth.lg_raw": [
2837              "0",
2838              0,
2839              3,
2840              131072,
2841              2
2842            ],
2843            "eth.dst.ig_raw": [
2844              "0",
2845              0,
2846              3,
2847              65536,
2848              2
2849            ],
2850            "eth.ig_raw": [
2851              "0",
2852              0,
2853              3,
2854              65536,
2855              2
2856            ]
2857          },
2858          "eth.src_raw": [
2859            "000874adf19b",
2860            6,
2861            6,
2862            0,
2863            29
2864          ],
2865          "eth.src_tree": {
2866            "eth.src_resolved_raw": [
2867              "000874adf19b",
2868              6,
2869              6,
2870              0,
2871              26
2872            ],
2873            "eth.src.oui_raw": [
2874              "000874",
2875              6,
2876              3,
2877              0,
2878              6
2879            ],
2880            "eth.src.oui_resolved_raw": [
2881              "000874adf19b",
2882              6,
2883              6,
2884              0,
2885              26
2886            ],
2887            "eth.addr_raw": [
2888              "000874adf19b",
2889              6,
2890              6,
2891              0,
2892              29
2893            ],
2894            "eth.addr_resolved_raw": [
2895              "000874adf19b",
2896              6,
2897              6,
2898              0,
2899              26
2900            ],
2901            "eth.addr.oui_raw": [
2902              "000874",
2903              6,
2904              3,
2905              0,
2906              6
2907            ],
2908            "eth.addr.oui_resolved_raw": [
2909              "000874adf19b",
2910              6,
2911              6,
2912              0,
2913              26
2914            ],
2915            "eth.src.lg_raw": [
2916              "0",
2917              6,
2918              3,
2919              131072,
2920              2
2921            ],
2922            "eth.lg_raw": [
2923              "0",
2924              6,
2925              3,
2926              131072,
2927              2
2928            ],
2929            "eth.src.ig_raw": [
2930              "0",
2931              6,
2932              3,
2933              65536,
2934              2
2935            ],
2936            "eth.ig_raw": [
2937              "0",
2938              6,
2939              3,
2940              65536,
2941              2
2942            ]
2943          },
2944          "eth.type_raw": [
2945            "0800",
2946            12,
2947            2,
2948            0,
2949            5
2950          ]
2951        },
2952        "ip_raw": [
2953          "450001480446000080110000c0a80001c0a8000a",
2954          14,
2955          20,
2956          0,
2957          1
2958        ],
2959        "ip": {
2960          "ip.version_raw": [
2961            "45",
2962            14,
2963            1,
2964            0,
2965            4
2966          ],
2967          "ip.hdr_len_raw": [
2968            "45",
2969            14,
2970            1,
2971            0,
2972            4
2973          ],
2974          "ip.dsfield_raw": [
2975            "00",
2976            15,
2977            1,
2978            0,
2979            4
2980          ],
2981          "ip.dsfield_tree": {
2982            "ip.dsfield.dscp_raw": [
2983              "0",
2984              15,
2985              1,
2986              252,
2987              4
2988            ],
2989            "ip.dsfield.ecn_raw": [
2990              "0",
2991              15,
2992              1,
2993              3,
2994              4
2995            ]
2996          },
2997          "ip.len_raw": [
2998            "0148",
2999            16,
3000            2,
3001            0,
3002            5
3003          ],
3004          "ip.id_raw": [
3005            "0446",
3006            18,
3007            2,
3008            0,
3009            5
3010          ],
3011          "ip.flags_raw": [
3012            "00",
3013            20,
3014            1,
3015            0,
3016            4
3017          ],
3018          "ip.flags_tree": {
3019            "ip.flags.rb_raw": [
3020              "0",
3021              20,
3022              1,
3023              128,
3024              2
3025            ],
3026            "ip.flags.df_raw": [
3027              "0",
3028              20,
3029              1,
3030              64,
3031              2
3032            ],
3033            "ip.flags.mf_raw": [
3034              "0",
3035              20,
3036              1,
3037              32,
3038              2
3039            ]
3040          },
3041          "ip.frag_offset_raw": [
3042            "0",
3043            20,
3044            2,
3045            8191,
3046            5
3047          ],
3048          "ip.ttl_raw": [
3049            "80",
3050            22,
3051            1,
3052            0,
3053            4
3054          ],
3055          "ip.proto_raw": [
3056            "11",
3057            23,
3058            1,
3059            0,
3060            4
3061          ],
3062          "ip.checksum_raw": [
3063            "0000",
3064            24,
3065            2,
3066            0,
3067            5
3068          ],
3069          "ip.checksum.status_raw": [
3070            "",
3071            24,
3072            0,
3073            0,
3074            4
3075          ],
3076          "ip.src_raw": [
3077            "c0a80001",
3078            26,
3079            4,
3080            0,
3081            32
3082          ],
3083          "ip.addr_raw": [
3084            "c0a80001",
3085            26,
3086            4,
3087            0,
3088            32
3089          ],
3090          "ip.src_host_raw": [
3091            "c0a80001",
3092            26,
3093            4,
3094            0,
3095            26
3096          ],
3097          "ip.host_raw": [
3098            "c0a80001",
3099            26,
3100            4,
3101            0,
3102            26
3103          ],
3104          "ip.dst_raw": [
3105            "c0a8000a",
3106            30,
3107            4,
3108            0,
3109            32
3110          ],
3111          "ip.addr_raw": [
3112            "c0a8000a",
3113            30,
3114            4,
3115            0,
3116            32
3117          ],
3118          "ip.dst_host_raw": [
3119            "c0a8000a",
3120            30,
3121            4,
3122            0,
3123            26
3124          ],
3125          "ip.host_raw": [
3126            "c0a8000a",
3127            30,
3128            4,
3129            0,
3130            26
3131          ]
3132        },
3133        "udp_raw": [
3134          "004300440134dfdb",
3135          34,
3136          8,
3137          0,
3138          1
3139        ],
3140        "udp": {
3141          "udp.srcport_raw": [
3142            "0043",
3143            34,
3144            2,
3145            0,
3146            5
3147          ],
3148          "udp.dstport_raw": [
3149            "0044",
3150            36,
3151            2,
3152            0,
3153            5
3154          ],
3155          "udp.port_raw": [
3156            "0043",
3157            34,
3158            2,
3159            0,
3160            5
3161          ],
3162          "udp.port_raw": [
3163            "0044",
3164            36,
3165            2,
3166            0,
3167            5
3168          ],
3169          "udp.length_raw": [
3170            "0134",
3171            38,
3172            2,
3173            0,
3174            5
3175          ],
3176          "udp.checksum_raw": [
3177            "dfdb",
3178            40,
3179            2,
3180            0,
3181            5
3182          ],
3183          "udp.checksum.status_raw": [
3184            "",
3185            40,
3186            0,
3187            0,
3188            4
3189          ],
3190          "udp.stream_raw": [
3191            "",
3192            42,
3193            0,
3194            0,
3195            7
3196          ],
3197          "Timestamps": {
3198            "udp.time_relative_raw": [
3199              "",
3200              34,
3201              0,
3202              0,
3203              25
3204            ],
3205            "udp.time_delta_raw": [
3206              "",
3207              34,
3208              0,
3209              0,
3210              25
3211            ]
3212          },
3213          "udp.payload_raw": [
3214            "0201060000003d1e0000000000000000c0a8000a0000000000000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501053a04000007083b0400000c4e330400000e103604c0a800010104ffffff00ff0000000000000000000000000000000000000000000000000000",
3215            42,
3216            300,
3217            0,
3218            30
3219          ]
3220        },
3221        "dhcp_raw": [
3222          "0201060000003d1e0000000000000000c0a8000a0000000000000000000b8201fc4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638253633501053a04000007083b0400000c4e330400000e103604c0a800010104ffffff00ff0000000000000000000000000000000000000000000000000000",
3223          42,
3224          300,
3225          0,
3226          1
3227        ],
3228        "dhcp": {
3229          "dhcp.type_raw": [
3230            "02",
3231            42,
3232            1,
3233            0,
3234            4
3235          ],
3236          "dhcp.hw.type_raw": [
3237            "01",
3238            43,
3239            1,
3240            0,
3241            4
3242          ],
3243          "dhcp.hw.len_raw": [
3244            "06",
3245            44,
3246            1,
3247            0,
3248            4
3249          ],
3250          "dhcp.hops_raw": [
3251            "00",
3252            45,
3253            1,
3254            0,
3255            4
3256          ],
3257          "dhcp.id_raw": [
3258            "00003d1e",
3259            46,
3260            4,
3261            0,
3262            7
3263          ],
3264          "dhcp.secs_raw": [
3265            "0000",
3266            50,
3267            2,
3268            0,
3269            5
3270          ],
3271          "dhcp.flags_raw": [
3272            "0000",
3273            52,
3274            2,
3275            0,
3276            5
3277          ],
3278          "dhcp.flags_tree": {
3279            "dhcp.flags.bc_raw": [
3280              "0",
3281              52,
3282              2,
3283              32768,
3284              2
3285            ],
3286            "dhcp.flags.reserved_raw": [
3287              "0",
3288              52,
3289              2,
3290              32767,
3291              5
3292            ]
3293          },
3294          "dhcp.ip.client_raw": [
3295            "00000000",
3296            54,
3297            4,
3298            0,
3299            32
3300          ],
3301          "dhcp.ip.your_raw": [
3302            "c0a8000a",
3303            58,
3304            4,
3305            0,
3306            32
3307          ],
3308          "dhcp.ip.server_raw": [
3309            "00000000",
3310            62,
3311            4,
3312            0,
3313            32
3314          ],
3315          "dhcp.ip.relay_raw": [
3316            "00000000",
3317            66,
3318            4,
3319            0,
3320            32
3321          ],
3322          "dhcp.hw.mac_addr_raw": [
3323            "000b8201fc42",
3324            70,
3325            6,
3326            0,
3327            29
3328          ],
3329          "dhcp.hw.addr_padding_raw": [
3330            "00000000000000000000",
3331            76,
3332            10,
3333            0,
3334            30
3335          ],
3336          "dhcp.server_raw": [
3337            "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
3338            86,
3339            64,
3340            0,
3341            26
3342          ],
3343          "dhcp.file_raw": [
3344            "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
3345            150,
3346            128,
3347            0,
3348            26
3349          ],
3350          "dhcp.cookie_raw": [
3351            "63825363",
3352            278,
3353            4,
3354            0,
3355            32
3356          ],
3357          "dhcp.option.type_raw": [
3358            "350105",
3359            282,
3360            3,
3361            0,
3362            4
3363          ],
3364          "dhcp.option.type_tree": {
3365            "dhcp.option.length_raw": [
3366              "01",
3367              283,
3368              1,
3369              0,
3370              4
3371            ],
3372            "dhcp.option.value_raw": [
3373              "05",
3374              284,
3375              1,
3376              0,
3377              30
3378            ],
3379            "dhcp.option.dhcp_raw": [
3380              "05",
3381              284,
3382              1,
3383              0,
3384              4
3385            ]
3386          },
3387          "dhcp.option.type_raw": [
3388            "3a0400000708",
3389            285,
3390            6,
3391            0,
3392            4
3393          ],
3394          "dhcp.option.type_tree": {
3395            "dhcp.option.length_raw": [
3396              "04",
3397              286,
3398              1,
3399              0,
3400              4
3401            ],
3402            "dhcp.option.value_raw": [
3403              "00000708",
3404              287,
3405              4,
3406              0,
3407              30
3408            ],
3409            "dhcp.option.renewal_time_value_raw": [
3410              "00000708",
3411              287,
3412              4,
3413              0,
3414              7
3415            ]
3416          },
3417          "dhcp.option.type_raw": [
3418            "3b0400000c4e",
3419            291,
3420            6,
3421            0,
3422            4
3423          ],
3424          "dhcp.option.type_tree": {
3425            "dhcp.option.length_raw": [
3426              "04",
3427              292,
3428              1,
3429              0,
3430              4
3431            ],
3432            "dhcp.option.value_raw": [
3433              "00000c4e",
3434              293,
3435              4,
3436              0,
3437              30
3438            ],
3439            "dhcp.option.rebinding_time_value_raw": [
3440              "00000c4e",
3441              293,
3442              4,
3443              0,
3444              7
3445            ]
3446          },
3447          "dhcp.option.type_raw": [
3448            "330400000e10",
3449            297,
3450            6,
3451            0,
3452            4
3453          ],
3454          "dhcp.option.type_tree": {
3455            "dhcp.option.length_raw": [
3456              "04",
3457              298,
3458              1,
3459              0,
3460              4
3461            ],
3462            "dhcp.option.value_raw": [
3463              "00000e10",
3464              299,
3465              4,
3466              0,
3467              30
3468            ],
3469            "dhcp.option.ip_address_lease_time_raw": [
3470              "00000e10",
3471              299,
3472              4,
3473              0,
3474              7
3475            ]
3476          },
3477          "dhcp.option.type_raw": [
3478            "3604c0a80001",
3479            303,
3480            6,
3481            0,
3482            4
3483          ],
3484          "dhcp.option.type_tree": {
3485            "dhcp.option.length_raw": [
3486              "04",
3487              304,
3488              1,
3489              0,
3490              4
3491            ],
3492            "dhcp.option.value_raw": [
3493              "c0a80001",
3494              305,
3495              4,
3496              0,
3497              30
3498            ],
3499            "dhcp.option.dhcp_server_id_raw": [
3500              "c0a80001",
3501              305,
3502              4,
3503              0,
3504              32
3505            ]
3506          },
3507          "dhcp.option.type_raw": [
3508            "0104ffffff00",
3509            309,
3510            6,
3511            0,
3512            4
3513          ],
3514          "dhcp.option.type_tree": {
3515            "dhcp.option.length_raw": [
3516              "04",
3517              310,
3518              1,
3519              0,
3520              4
3521            ],
3522            "dhcp.option.value_raw": [
3523              "ffffff00",
3524              311,
3525              4,
3526              0,
3527              30
3528            ],
3529            "dhcp.option.subnet_mask_raw": [
3530              "ffffff00",
3531              311,
3532              4,
3533              0,
3534              32
3535            ]
3536          },
3537          "dhcp.option.type_raw": [
3538            "ff",
3539            315,
3540            1,
3541            0,
3542            4
3543          ],
3544          "dhcp.option.type_tree": {
3545            "dhcp.option.end_raw": [
3546              "ff",
3547              315,
3548              1,
3549              0,
3550              4
3551            ]
3552          },
3553          "dhcp.option.padding_raw": [
3554            "0000000000000000000000000000000000000000000000000000",
3555            316,
3556            26,
3557            0,
3558            30
3559          ]
3560        }
3561      }
3562    }
3563  }
3564]
3565