{
  "_id": "2505-abcdef123456",
  "firstPacket": "2025-01-15T10:30:00Z",
  "lastPacket": "2025-01-15T10:30:05Z",
  "source.ip": "203.0.113.45",
  "source.port": 54321,
  "destination.ip": "198.51.100.10",
  "destination.port": 443,
  "source.bytes": 1024,
  "source.packets": 10,
  "destination.bytes": 2048,
  "destination.packets": 8,
  "classification": "malicious"
}