{ "_id": "2505-abcdef123456", "firstPacket": "2025-01-15T10:30:00Z", "lastPacket": "2025-01-15T10:30:05Z", "source.ip": "203.0.113.45", "source.port": 54321, "destination.ip": "198.51.100.10", "destination.port": 443, "source.bytes": 1024, "source.packets": 10, "destination.bytes": 2048, "destination.packets": 8, "classification": "malicious" }