PAR1 2,55(55cd``0D, Amazon VPC Amazon VPC( Amazon VPC Amazon VPCb``pMS pBL@,FlowlogsFlowlogs(FlowlogsFlowlogs```p/O/zŦ 6,AWSAWS(AWSAWScf``p DTr,6(security_controlcloudcb```fb\ @*9'4E(NM.-,O+)h*D, 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2b``033-J3 ,P, 123456789012 123456789012( 123456789012 123456789012cb```fF&fFpj&J, us-east-2 us-east-2( us-east-2 us-east-2cb```fź%FI>$H,use1-az1use1-az1(use1-az1use1-az1cb```fũUA3?6,AWSAWS(AWSAWScf``p D<,(cb```fL8 :,--(--cb```fdд "F,1.2.3.41.2.3.4(1.2.3.41.2.3.4cb```fdzFzz&C 0N,1.2.3.51.2.3.5(1.2.3.51.2.3.5cb```B  L|@F,eni-000000000000000000eni-000000000000000000(eni-000000000000000000eni-000000000000000000cb```fyt ,F, vpc-00000000 vpc-00000000( vpc-00000000 vpc-00000000cb```feɺPCj<B,i-000000000000000000i-000000000000000000(i-000000000000000000i-000000000000000000cb```fmFL,subnet-000000000000000000subnet-000000000000000000(subnet-000000000000000000subnet-000000000000000000cb```fťIy%,#<,(cb```fdJj :,--(--cb```fdд *N, 172.31.2.52 172.31.2.52( 172.31.2.52 172.31.2.52cb```fFzƆzFzF}#8V, 172.31.2.53 172.31.2.53( 172.31.2.53 172.31.2.53cb```B ͍ L 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS'8,(cb```fdy 8,(cb```fd+ @,IPv4IPv4(IPv4IPv4cb```fde&8,cc(cccb```fLu :,--(--cb```fdд 8,(cb```fd+ $H,OutboundOutbound(OutboundOutboundcb```f%Iy)Fx:,(cb```fdd3:,22(22cb```f4b*Fq 8,([ZX!D,(cb```f\ZX D,``(``cb```fL8&"2"S<,OKOK(OKOKcb```fd~>1d 0,(cd``y"J, Informational Informational( Informational Informationale``K/M,K@(P,Network ActivityNetwork Activity(Network ActivityNetwork Activity```K-)/VpL.,,\L0,([A(P,Network ActivityNetwork Activity(Network ActivityNetwork Activity```K-)/VpL.,,\L0,(ca``KH&>,TrafficTraffic(TrafficTrafficcg``)JLKLd E 0,(cc``/>,AllowedAllowed(AllowedAllowedcg``p/OM, 0,(cd``y0,({%`m:b,Network Activity: TrafficNetwork Activity: Traffic(Network Activity: TrafficNetwork Activity: Trafficd``K-)/VpL.,,R)JLKLT7xfl,6(sublocation_typesublocation_idcb```fb\ |@4)'?9$3?/>3EM 3 2Lcd``؂>,--(--cb```fb\@ jCHnetwork_activity.5metadata5product %version% %name%5feature %name% % vendor_name%5profiles %array% %version%5cloud % account_uid% %region% %zone% %provider%5 src_endpoint%port %svc_name% %ip%5intermediate_ips %array% % interface_uid% %vpc_uid% % instance_uid% % subnet_uid%5 dst_endpoint%port %svc_name% %ip%5intermediate_ips %array% % interface_uid% %vpc_uid% % instance_uid% % subnet_uid%5connection_info% protocol_num% tcp_flags % protocol_ver%% boundary_id %boundary%% direction_id % direction%5traffic%packets%bytes%time% start_time%end_time % status_code%% severity_id %severity% % class_name%% class_uid % category_name%% category_uid % activity_name%% activity_id % disposition%%disposition_id%type_uid % type_name%5unmapped5map %key% %value%5& %8metadataproductversionLt&<55(55&| %8metadataproductname&|< Amazon VPC Amazon VPC( Amazon VPC Amazon VPC& %Hmetadataproductfeaturename&<FlowlogsFlowlogs(FlowlogsFlowlogs& %8metadataproduct vendor_name`&<AWSAWS(AWSAWS& %8metadataprofilesarray&<6(security_controlcloud& %(metadataversion&< 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2& 5(cloud account_uid&< 123456789012 123456789012( 123456789012 123456789012&  5(cloudregion& < us-east-2 us-east-2( us-east-2 us-east-2&  5(cloudzone& <use1-az1use1-az1(use1-az1use1-az1&  %(cloudprovider`& <AWSAWS(AWSAWS&5( src_endpointportn&<(& 5( src_endpointsvc_nameX|&<--(--& 5( src_endpointip&<1.2.3.41.2.3.4(1.2.3.41.2.3.4& %8 src_endpointintermediate_ipsarray&<1.2.3.51.2.3.5(1.2.3.51.2.3.5& 5( src_endpoint interface_uid&<eni-000000000000000000eni-000000000000000000(eni-000000000000000000eni-000000000000000000& 5( src_endpointvpc_uid&< vpc-00000000 vpc-00000000( vpc-00000000 vpc-00000000& 5( src_endpoint instance_uid&<i-000000000000000000i-000000000000000000(i-000000000000000000i-000000000000000000& 5( src_endpoint subnet_uid&<subnet-000000000000000000subnet-000000000000000000(subnet-000000000000000000subnet-000000000000000000&5( dst_endpointportn&<(& 5( dst_endpointsvc_nameX|&<--(--& 5( dst_endpointip&< 172.31.2.52 172.31.2.52( 172.31.2.52 172.31.2.52&  %8 dst_endpointintermediate_ipsarray& < 172.31.2.53 172.31.2.53( 172.31.2.53 172.31.2.53&" 5( dst_endpoint interface_uid6^&"<6&" 5( dst_endpointvpc_uid6^&"<6&# 5( dst_endpoint instance_uid6^&#<6&$ 5( dst_endpoint subnet_uid6^&$<6&$5(connection_info protocol_numn&$<(&&5(connection_info tcp_flagsn&&<(&' 5(connection_info protocol_verv&'<IPv4IPv4(IPv4IPv4&(5(connection_info boundary_idn&(<cc(cc&) 5(connection_infoboundaryX|&)<--(--&*5(connection_info direction_idn&*<(&+ 5(connection_info direction&+<OutboundOutbound(OutboundOutbound&-5(trafficpackets&-<(&.5(trafficbytes&.<22(22&0%time&0<(&15 start_time&1<(&25end_time&2<``(``&4 5 status_codeb&4<OKOK(OKOK&5% severity_idb&5<(&6 %severity&6< Informational Informational( Informational Informational&8 % class_name&8<Network ActivityNetwork Activity(Network ActivityNetwork Activity&:% class_uidb&:<(&; % category_name&;<Network ActivityNetwork Activity(Network ActivityNetwork Activity&=% category_uidb&=<(&> % activity_name&><TrafficTraffic(TrafficTraffic&@% activity_idb&@<(&A % disposition&A<AllowedAllowed(AllowedAllowed&B%disposition_idb&B<(&C%type_uidb&C<(&D % type_name&D<Network Activity: TrafficNetwork Activity: Traffic(Network Activity: TrafficNetwork Activity: Traffic&G %8unmappedmapkey&G<6(sublocation_typesublocation_id&I %8unmappedmapvalue&I<--(--,;,parquet.avro.schema{"type":"record","name":"network_activity","fields":[{"name":"metadata","type":{"type":"record","name":"metadata_record","fields":[{"name":"product","type":{"type":"record","name":"metadataproduct_record","fields":[{"name":"version","type":"string"},{"name":"name","type":"string"},{"name":"feature","type":{"type":"record","name":"metadataproductfeature_record","fields":[{"name":"name","type":"string"}]}},{"name":"vendor_name","type":"string"}]}},{"name":"profiles","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"version","type":"string"}]}},{"name":"cloud","type":{"type":"record","name":"cloud_record","fields":[{"name":"account_uid","type":["null","string"],"default":null},{"name":"region","type":["null","string"],"default":null},{"name":"zone","type":["null","string"],"default":null},{"name":"provider","type":"string"}]}},{"name":"src_endpoint","type":{"type":"record","name":"src_endpoint_record","fields":[{"name":"port","type":["null","int"],"default":null},{"name":"svc_name","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"intermediate_ips","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"interface_uid","type":["null","string"],"default":null},{"name":"vpc_uid","type":["null","string"],"default":null},{"name":"instance_uid","type":["null","string"],"default":null},{"name":"subnet_uid","type":["null","string"],"default":null}]}},{"name":"dst_endpoint","type":{"type":"record","name":"dst_endpoint_record","fields":[{"name":"port","type":["null","int"],"default":null},{"name":"svc_name","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"intermediate_ips","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"interface_uid","type":["null","string"],"default":null},{"name":"vpc_uid","type":["null","string"],"default":null},{"name":"instance_uid","type":["null","string"],"default":null},{"name":"subnet_uid","type":["null","string"],"default":null}]}},{"name":"connection_info","type":{"type":"record","name":"connection_info_record","fields":[{"name":"protocol_num","type":["null","int"],"default":null},{"name":"tcp_flags","type":["null","int"],"default":null},{"name":"protocol_ver","type":["null","string"],"default":null},{"name":"boundary_id","type":["null","int"],"default":null},{"name":"boundary","type":["null","string"],"default":null},{"name":"direction_id","type":["null","int"],"default":null},{"name":"direction","type":["null","string"],"default":null}]}},{"name":"traffic","type":{"type":"record","name":"traffic_record","fields":[{"name":"packets","type":["null","long"],"default":null},{"name":"bytes","type":["null","long"],"default":null}]}},{"name":"time","type":"long","logicalType":"timestamp-millis"},{"name":"start_time","type":["null","long"],"logicalType":"timestamp-millis"},{"name":"end_time","type":["null","long"],"logicalType":"timestamp-millis"},{"name":"status_code","type":["null","string"],"default":null},{"name":"severity_id","type":"int"},{"name":"severity","type":"string"},{"name":"class_name","type":"string"},{"name":"class_uid","type":"int"},{"name":"category_name","type":"string"},{"name":"category_uid","type":"int"},{"name":"activity_name","type":"string"},{"name":"activity_id","type":"int"},{"name":"disposition","type":"string"},{"name":"disposition_id","type":"int"},{"name":"type_uid","type":"int"},{"name":"type_name","type":"string"},{"name":"unmapped","type":["null",{"type":"map","values":"string","default":null}],"default":null}],"version":"1.0.0-rc.2"}writer.model.nameavro0parquet-mr version 1.10.0 (build ${buildNumber})5h'PAR1