tianxuan/logs/tianxuan.log

[2026-07-14 19:44:57,035] WARNING django.request: Not Found: /favicon.ico
[2026-07-14 19:45:27,039] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=500
[2026-07-14 19:45:27,039] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 19:45:27,040] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 19:45:27,040] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 19:45:27,040] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 19:45:27,040] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 19:45:27,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 19:45:27,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 19:45:27,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 19:45:27,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 19:45:27,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 19:45:27,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 19:45:27,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 19:45:27,082] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 19:45:27,083] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 19:45:27,083] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 19:45:27,083] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 19:45:27,084] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 19:45:27,084] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 19:45:27,084] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 19:45:27,086] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 19:45:27,086] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 19:45:27,086] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 19:45:27,087] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 19:45:27,087] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 19:45:27,087] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 19:45:27,087] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=bytes_sent dtype=Int64
[2026-07-14 19:45:27,088] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 19:45:33,073] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 19:45:44,464] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 19:49:20,054] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:09:16,177] WARNING django.request: Not Found: /favicon.ico
[2026-07-14 20:10:02,002] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:10:04,926] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:10:07,524] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:10:10,071] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:10:13,377] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:11:32,089] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:11:47,437] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:12:30,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=bytes_sent dtype=Int64
[2026-07-14 20:12:30,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:12:31,337] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=9 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-14 20:12:44,678] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:12:55,173] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:13:00,328] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:17:00,194] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:17:06,695] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:17:07,172] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:18:52,694] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:18:52,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:18:52,707] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:18:52,707] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:18:52,729] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:19:19,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:19:19,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:19:19,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:19:19,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:19:19,218] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:19:19,218] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:19:19,218] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:19:19,218] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:19:19,218] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:19:19,220] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:19:19,241] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:19:50,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:19:50,814] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:19:50,814] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:19:50,814] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:19:50,814] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:19:50,814] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:19:50,814] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:19:50,814] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:19:50,815] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:19:50,815] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:19:50,815] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:19:50,815] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:19:50,815] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:19:50,815] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:19:50,815] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:19:50,815] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:19:50,842] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:20:22,629] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:20:22,640] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:20:22,659] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:20:57,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:20:57,438] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:20:57,460] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:21:28,636] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:21:28,636] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:21:28,665] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:22:14,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:22:14,763] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:22:14,785] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:22:35,595] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:22:35,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:22:35,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:22:35,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:22:35,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:22:35,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:22:35,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:22:35,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:22:35,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:22:35,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:22:35,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:22:35,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:22:35,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:22:35,615] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:22:35,617] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:22:35,617] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:22:35,617] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:22:35,617] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:22:35,617] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:22:35,617] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:22:35,634] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:22:47,689] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:22:47,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:22:47,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:22:47,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:22:47,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:22:47,692] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:22:47,692] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:22:47,692] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:22:47,692] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:22:47,692] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:22:47,692] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:22:47,692] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:22:47,692] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:22:47,697] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:22:47,718] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:23:17,282] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:23:17,282] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:23:17,282] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:23:17,282] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:23:17,283] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:23:17,292] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:23:17,310] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:23:35,807] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:23:35,807] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:23:35,810] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:23:35,810] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:23:35,810] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:23:35,810] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:23:35,810] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:23:35,810] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:23:35,810] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:23:35,810] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:23:35,811] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:23:35,811] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:23:35,811] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:23:35,819] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:23:35,821] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:23:35,821] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:23:35,821] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:23:35,821] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:23:35,821] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:23:35,839] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:24:04,833] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:24:04,833] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:24:04,833] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:24:04,833] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:24:04,834] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:24:04,838] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:24:04,861] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:24:41,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:24:41,968] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:24:41,972] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:24:41,987] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:25:04,313] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:25:04,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:25:04,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:25:04,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:25:04,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:25:04,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:25:04,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:25:04,318] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:25:04,318] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:25:04,318] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:25:04,318] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:25:04,318] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:25:04,318] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:25:04,324] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:25:04,350] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:26:44,479] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:26:44,479] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:26:44,479] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:26:44,479] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:26:44,486] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:26:44,495] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:26:44,495] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:26:44,495] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:26:44,495] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:26:44,495] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:26:44,495] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:26:44,495] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:26:44,497] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:26:44,497] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:26:44,497] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:26:44,497] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:26:44,497] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:26:44,497] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:26:44,497] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:26:44,497] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:26:44,515] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:27:02,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:27:02,068] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:27:02,071] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:27:02,071] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:27:02,071] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:27:02,097] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:27:23,690] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:27:23,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:27:23,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:27:23,701] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:27:23,703] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:27:23,703] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:27:23,703] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:27:23,703] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:27:23,703] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:27:23,703] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:27:23,704] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:27:23,704] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:27:23,704] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:27:23,704] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:27:23,704] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:27:23,704] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:27:23,721] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:28:11,643] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:28:11,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:28:11,693] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-14 20:28:21,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-14 20:28:21,045] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-14 20:28:21,045] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:28:21,045] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:28:21,045] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-14 20:28:21,049] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-14 20:28:21,560] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=9 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-14 20:39:32,609] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:39:32,609] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:39:32,609] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:39:32,609] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:39:32,609] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:39:32,609] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:39:32,609] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:39:32,609] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:39:32,615] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:39:32,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:39:32,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:39:32,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:39:32,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:39:32,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:39:32,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:39:32,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-14 20:39:32,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-14 20:39:33,231] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-14 20:39:50,002] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:39:50,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:39:50,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:39:50,004] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:39:50,011] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-chat url=https://api.deepseek.com/chat/completions
[2026-07-14 20:39:50,024] INFO tianxuan.llm: [LLM REQUEST] messages=[{"role": "system", "content": "You are a TLS data analysis assistant. You have access to the following tools:\n\n1. profile_data(dataset_id) - Get column statistics and data distribution\n2. filter_data(dataset_id, filters, logic) - Filter data by conditions\n3. build_entity_profiles(dataset_id, auto_detect) - Auto-detect entity column and aggregate\n4. run_clustering(dataset_id, cluster_columns, algorithm, params) - Run HDBSCAN/KMeans\n5. evaluate_clustering(cluster_result_id, dataset_id) - Get clustering quality metrics\n6. extract_features(dataset_id, cluster_result_id, method) - Extract distinguishing features per cluster\n\nAnalyze the data step by step. Call one tool at a time and wait for results."}, {"role": "user", "content": "Analyze dataset ds. Start by profiling the data, then build entity profiles, run clustering, and extract features."}]
[2026-07-14 20:39:51,365] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=655
[2026-07-14 20:39:51,368] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "ds"}
[2026-07-14 20:39:51,400] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"error": "Profiling failed: 'index'", "truncated": false}
[2026-07-14 20:39:51,400] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-chat url=https://api.deepseek.com/chat/completions
[2026-07-14 20:39:51,400] INFO tianxuan.llm: [LLM REQUEST] messages=[{"role": "system", "content": "You are a TLS data analysis assistant. You have access to the following tools:\n\n1. profile_data(dataset_id) - Get column statistics and data distribution\n2. filter_data(dataset_id, filters, logic) - Filter data by conditions\n3. build_entity_profiles(dataset_id, auto_detect) - Auto-detect entity column and aggregate\n4. run_clustering(dataset_id, cluster_columns, algorithm, params) - Run HDBSCAN/KMeans\n5. evaluate_clustering(cluster_result_id, dataset_id) - Get clustering quality metrics\n6. extract_features(dataset_id, cluster_result_id, method) - Extract distinguishing features per cluster\n\nAnalyze the data step by step. Call one tool at a time and wait for results."}, {"role": "user", "content": "Analyze dataset ds. Start by profiling the data, then build entity profiles, run clustering, and extract features."}, {"role": "tool", "tool_call_id": "call_00_LTudCuAKoL18Td9otWja0708", "name": "profile_data", "content": "{\"error\": \"Profiling failed: 'index'\", \"truncated\": false}"}]
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:40:19,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:40:19,596] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-chat url=https://api.deepseek.com/chat/completions
[2026-07-14 20:40:19,596] INFO tianxuan.llm: [LLM REQUEST] messages=[{"role": "system", "content": "You are a TLS data analysis assistant. You have access to the following tools:\n\n1. profile_data(dataset_id) - Get column statistics and data distribution\n2. filter_data(dataset_id, filters, logic) - Filter data by conditions\n3. build_entity_profiles(dataset_id, auto_detect) - Auto-detect entity column and aggregate\n4. run_clustering(dataset_id, cluster_columns, algorithm, params) - Run HDBSCAN/KMeans\n5. evaluate_clustering(cluster_result_id, dataset_id) - Get clustering quality metrics\n6. extract_features(dataset_id, cluster_result_id, method) - Extract distinguishing features per cluster\n\nAnalyze the data step by step. Call one tool at a time and wait for results."}, {"role": "user", "content": "Analyze dataset ds. Start by profiling the data, then build entity profiles, run clustering, and extract features."}]
[2026-07-14 20:40:20,714] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=311
[2026-07-14 20:40:20,714] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "ds"}
[2026-07-14 20:40:20,741] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"error": "Profiling failed: 'index'", "truncated": false}
[2026-07-14 20:40:20,744] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-chat url=https://api.deepseek.com/chat/completions
[2026-07-14 20:40:20,744] INFO tianxuan.llm: [LLM REQUEST] messages=[{"role": "system", "content": "You are a TLS data analysis assistant. You have access to the following tools:\n\n1. profile_data(dataset_id) - Get column statistics and data distribution\n2. filter_data(dataset_id, filters, logic) - Filter data by conditions\n3. build_entity_profiles(dataset_id, auto_detect) - Auto-detect entity column and aggregate\n4. run_clustering(dataset_id, cluster_columns, algorithm, params) - Run HDBSCAN/KMeans\n5. evaluate_clustering(cluster_result_id, dataset_id) - Get clustering quality metrics\n6. extract_features(dataset_id, cluster_result_id, method) - Extract distinguishing features per cluster\n\nAnalyze the data step by step. Call one tool at a time and wait for results."}, {"role": "user", "content": "Analyze dataset ds. Start by profiling the data, then build entity profiles, run clustering, and extract features."}, {"role": "tool", "tool_call_id": "call_00_smgDjNLv7Lxfax7AwfU08041", "name": "profile_data", "content": "{\"error\": \"Profiling failed: 'index'\", \"truncated\": false}"}]
[2026-07-14 20:41:03,172] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:41:03,172] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:41:03,174] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:41:03,175] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:41:03,176] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:41:03,176] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:41:03,176] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:41:03,176] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:41:03,176] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:41:03,192] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-chat url=https://api.deepseek.com/chat/completions
[2026-07-14 20:41:03,192] INFO tianxuan.llm: [LLM REQUEST] messages=[{"role": "system", "content": "You are a TLS data analysis assistant. You have access to the following tools:\n\n1. profile_data(dataset_id) - Get column statistics and data distribution\n2. filter_data(dataset_id, filters, logic) - Filter data by conditions\n3. build_entity_profiles(dataset_id, auto_detect) - Auto-detect entity column and aggregate\n4. run_clustering(dataset_id, cluster_columns, algorithm, params) - Run HDBSCAN/KMeans\n5. evaluate_clustering(cluster_result_id, dataset_id) - Get clustering quality metrics\n6. extract_features(dataset_id, cluster_result_id, method) - Extract distinguishing features per cluster\n\nAnalyze the data step by step. Call one tool at a time and wait for results."}, {"role": "user", "content": "Analyze dataset ds. Start by profiling the data, then build entity profiles, run clustering, and extract features."}]
[2026-07-14 20:41:04,413] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=297
[2026-07-14 20:41:04,413] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "ds"}
[2026-07-14 20:41:04,440] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"error": "Profiling failed: 'index'", "truncated": false}
[2026-07-14 20:41:04,440] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-chat url=https://api.deepseek.com/chat/completions
[2026-07-14 20:41:04,440] INFO tianxuan.llm: [LLM REQUEST] messages=[{"role": "system", "content": "You are a TLS data analysis assistant. You have access to the following tools:\n\n1. profile_data(dataset_id) - Get column statistics and data distribution\n2. filter_data(dataset_id, filters, logic) - Filter data by conditions\n3. build_entity_profiles(dataset_id, auto_detect) - Auto-detect entity column and aggregate\n4. run_clustering(dataset_id, cluster_columns, algorithm, params) - Run HDBSCAN/KMeans\n5. evaluate_clustering(cluster_result_id, dataset_id) - Get clustering quality metrics\n6. extract_features(dataset_id, cluster_result_id, method) - Extract distinguishing features per cluster\n\nAnalyze the data step by step. Call one tool at a time and wait for results."}, {"role": "user", "content": "Analyze dataset ds. Start by profiling the data, then build entity profiles, run clustering, and extract features."}, {"role": "tool", "tool_call_id": "call_00_CysHBAIOK82R39hFtZjc6401", "name": "profile_data", "content": "{\"error\": \"Profiling failed: 'index'\", \"truncated\": false}"}]
[2026-07-14 20:42:05,132] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:42:05,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:42:05,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:42:05,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:42:05,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:42:05,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:42:05,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:42:05,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:42:05,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:42:05,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:42:05,154] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:42:06,807] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=1655
[2026-07-14 20:42:06,807] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "ds"}
[2026-07-14 20:42:06,828] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"error": "Profiling failed: 'index'", "truncated": false}
[2026-07-14 20:42:06,830] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:42:20,380] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:44:40,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:45:17,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:45:17,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:45:53,991] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:45:53,991] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:45:53,995] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:46:05,693] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:46:05,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:46:05,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:46:05,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:46:05,711] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-chat
[2026-07-14 20:46:09,302] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=3594
[2026-07-14 20:46:09,302] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "ds"}
[2026-07-14 20:46:09,339] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"column_stats": {"timestamp": {"dtype": "String", "null_count": 0, "non_null_count": 1000, "unique_count": 1000, "type_category": "categorical", "top_values": [{"value": "2025-11-29 01:10:30", "count": 1}, {"value": "2025-06-17 08:41:08", "count": 1}, {"value": "2025-07-19 08:30:20", "count": 1}, {"value": "2025-12-05 10:27:55", "count": 1}, {"value": "2025-12-26 07:45:18", "count": 1}], "is_entity_candidate": false}, "src_ip": {"dtype": "String", "null_count": 0, "non_null_count": 1000, "uniqu
[2026-07-14 20:46:09,339] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-chat
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:47:20,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:47:20,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:47:20,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:47:20,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:47:52,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:47:52,777] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:47:52,777] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:47:52,777] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:47:52,777] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:48:01,262] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:48:01,268] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:48:01,268] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:48:01,268] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:48:01,268] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:48:24,595] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:48:24,595] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:48:24,595] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:48:24,595] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:48:24,597] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:48:38,342] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:48:38,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:48:38,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:48:38,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:48:38,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:48:38,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:48:38,344] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:48:38,344] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:48:38,344] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:48:38,344] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:48:38,344] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:48:38,344] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:48:38,344] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:48:38,344] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:48:38,346] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:48:38,362] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:39,603] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=1233
[2026-07-14 20:48:39,603] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "ds"}
[2026-07-14 20:48:39,632] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"column_stats": {"timestamp": {"dtype": "String", "null_count": 0, "non_null_count": 1000, "unique_count": 1000, "type_category": "categorical", "top_values": [{"value": "2025-03-30 15:27:40", "count": 1}, {"value": "2025-06-25 05:20:17", "count": 1}, {"value": "2025-01-26 20:47:05", "count": 1}, {"value": "2025-11-29 03:58:10", "count": 1}, {"value": "2025-11-25 20:56:55", "count": 1}], "is_entity_candidate": false}, "src_ip": {"dtype": "String", "null_count": 0, "non_null_count": 1000, "uniqu
[2026-07-14 20:48:39,633] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:41,063] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=1422
[2026-07-14 20:48:41,066] INFO tianxuan.llm: [TOOL CALL] name=build_entity_profiles args={"dataset_id": "ds", "auto_detect": true}
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:48:41,085] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:48:41,089] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-14 20:48:41,089] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:48:41,089] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-14 20:48:41,089] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-14 20:48:41,115] INFO tianxuan.llm: [TOOL RESULT] name=build_entity_profiles result={"entity_dataset_id": "entity_01d526f18f0b", "entity_count": 5000, "entity_columns_used": ["src_mac"], "feature_columns": ["src_mac", "flow_count", "total_bytes_sent", "total_bytes_rev", "avg_duration", "total_packets", "total_packets_rev", "unique_dst_ips", "unique_dst_ports", "unique_dst_networks", "unique_ciphers", "tls_version_mode", "unique_versions", "sni_count", "unique_protocols", "tcp_flag_modes", "avg_latitude", "avg_longitude", "first_seen", "last_seen", "active_hours_count"], "detect
[2026-07-14 20:48:41,115] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:42,918] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=1795
[2026-07-14 20:48:42,918] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "ds"}
[2026-07-14 20:48:42,951] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"column_stats": {"timestamp": {"dtype": "String", "null_count": 0, "non_null_count": 1000, "unique_count": 1000, "type_category": "categorical", "top_values": [{"value": "2025-08-27 03:00:35", "count": 1}, {"value": "2025-07-16 23:38:17", "count": 1}, {"value": "2025-12-23 09:41:59", "count": 1}, {"value": "2025-09-15 12:34:19", "count": 1}, {"value": "2025-03-14 07:25:01", "count": 1}], "is_entity_candidate": false}, "src_ip": {"dtype": "String", "null_count": 0, "non_null_count": 1000, "uniqu
[2026-07-14 20:48:42,951] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:45,112] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=2155
[2026-07-14 20:48:45,112] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "entity_01d526f18f0b"}
[2026-07-14 20:48:45,133] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"column_stats": {"src_mac": {"dtype": "String", "null_count": 0, "non_null_count": 1000, "unique_count": 1000, "type_category": "categorical", "top_values": [{"value": "27:be:a1:7b:b0:3e", "count": 1}, {"value": "f7:50:19:c6:2e:26", "count": 1}, {"value": "f0:27:64:c1:6b:e9", "count": 1}, {"value": "89:d1:6f:e3:e8:f6", "count": 1}, {"value": "5e:11:28:92:f5:83", "count": 1}], "is_entity_candidate": false}, "flow_count": {"dtype": "UInt32", "null_count": 0, "non_null_count": 1000, "min": 1.0, "m
[2026-07-14 20:48:45,133] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:47,345] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=2202
[2026-07-14 20:48:47,345] INFO tianxuan.llm: [TOOL CALL] name=profile_data args={"dataset_id": "entity_01d526f18f0b"}
[2026-07-14 20:48:47,357] INFO tianxuan.llm: [TOOL RESULT] name=profile_data result={"column_stats": {"src_mac": {"dtype": "String", "null_count": 0, "non_null_count": 1000, "unique_count": 1000, "type_category": "categorical", "top_values": [{"value": "db:72:12:f8:0f:4a", "count": 1}, {"value": "9a:22:e7:e0:f4:d1", "count": 1}, {"value": "64:b5:21:74:77:49", "count": 1}, {"value": "ee:ea:0f:3c:6d:f7", "count": 1}, {"value": "87:74:77:75:f0:5f", "count": 1}], "is_entity_candidate": false}, "flow_count": {"dtype": "UInt32", "null_count": 0, "non_null_count": 1000, "min": 1.0, "m
[2026-07-14 20:48:47,359] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:49,809] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=2452
[2026-07-14 20:48:49,809] INFO tianxuan.llm: [TOOL CALL] name=run_clustering args={"dataset_id": "entity_01d526f18f0b", "cluster_columns": ["total_bytes_sent", "total_bytes_rev", "avg_duration", "total_packets", "total_packets_rev", "unique_dst_ips", "unique_dst_ports", "sni_count", "avg_latitude", "avg_longitude"], "algorithm": "hdbscan"}
[2026-07-14 20:48:49,823] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=8 feature_cols=['total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'sni_count', 'avg_latitude', 'avg_longitude']
[2026-07-14 20:48:51,332] INFO tianxuan.llm: [TOOL RESULT] name=run_clustering result={"cluster_result_id": "clust_6256856c6a07", "n_clusters": 188, "n_noise": 2282, "labels_sample": [-1, 107, -1, 121, -1, 76, -1, -1, -1, 48, 1, 0, 141, -1, -1, -1, -1, 149, -1, 11, 161, 113, 46, -1, -1, 117, -1, -1, -1, -1, 88, 184, 121, 95, 0, -1, -1, -1, 151, -1, 1, -1, 59, 182, 132, 9, -1, -1, 84, 14], "quality_metrics": {"n_clusters": 188, "n_noise": 2282, "noise_ratio": 0.4564, "algorithm": "hdbscan", "silhouette_score": -0.0986, "davies_bouldin_score": 1.2648, "calinski_harabasz_score": 15.
[2026-07-14 20:48:51,348] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:53,902] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=2547
[2026-07-14 20:48:53,902] INFO tianxuan.llm: [TOOL CALL] name=run_clustering args={"dataset_id": "entity_01d526f18f0b", "cluster_columns": ["total_bytes_sent", "total_bytes_rev", "avg_duration", "total_packets", "total_packets_rev", "unique_dst_ips", "unique_dst_ports", "sni_count", "avg_latitude", "avg_longitude"], "algorithm": "kmeans"}
[2026-07-14 20:48:53,912] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=8 feature_cols=['total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'sni_count', 'avg_latitude', 'avg_longitude']
[2026-07-14 20:48:55,861] INFO tianxuan.llm: [TOOL RESULT] name=run_clustering result={"cluster_result_id": "clust_58224f0f54f7", "n_clusters": 3, "n_noise": 0, "labels_sample": [1, 1, 1, 2, 2, 2, 1, 2, 2, 1, 0, 0, 1, 1, 1, 1, 2, 2, 2, 0, 2, 1, 2, 1, 1, 1, 2, 2, 1, 0, 2, 2, 2, 1, 0, 1, 2, 1, 2, 2, 0, 0, 2, 2, 2, 0, 1, 2, 2, 0], "quality_metrics": {"n_clusters": 3, "n_noise": 0, "noise_ratio": 0.0, "algorithm": "kmeans", "silhouette_score": 0.3474, "davies_bouldin_score": 1.2039, "calinski_harabasz_score": 1172.6995, "cluster_sizes": {"0": 1028, "1": 1606, "2": 2366}}, "truncated"
[2026-07-14 20:48:55,861] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:57,422] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=1561
[2026-07-14 20:48:57,422] INFO tianxuan.llm: [TOOL CALL] name=extract_features args={"dataset_id": "entity_01d526f18f0b", "cluster_result_id": "clust_58224f0f54f7", "method": "zscore"}
[2026-07-14 20:48:57,563] INFO tianxuan.llm: [TOOL RESULT] name=extract_features result={"feature_result_id": "feat_cc591af2ec7b", "features": [{"feature_name": "sni_count", "cluster_label": 0, "mean": 0.0, "std": 0.0, "global_mean": 0.7944, "global_std": 0.4042, "distinguishing_score": -1.9655, "distinguishing_method": "zscore"}, {"feature_name": "avg_duration", "cluster_label": 0, "mean": 19.8145, "std": 20.415, "global_mean": 19.5031, "global_std": 19.637, "distinguishing_score": 0.0159, "distinguishing_method": "zscore"}, {"feature_name": "avg_longitude", "cluster_label": 0, "m
[2026-07-14 20:48:57,563] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:48:59,491] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=1938
[2026-07-14 20:48:59,506] INFO tianxuan.llm: [TOOL CALL] name=extract_features args={"dataset_id": "entity_01d526f18f0b", "cluster_result_id": "clust_58224f0f54f7", "method": "anova"}
[2026-07-14 20:48:59,538] INFO tianxuan.llm: [TOOL RESULT] name=extract_features result={"feature_result_id": "feat_dd8372362bde", "features": [{"feature_name": "sni_count", "cluster_label": 0, "mean": 0.0, "std": 0.0, "global_mean": 0.7944, "global_std": 0.4042, "distinguishing_score": 1.9655, "distinguishing_method": "anova"}, {"feature_name": "avg_duration", "cluster_label": 0, "mean": 19.8145, "std": 20.415, "global_mean": 19.5031, "global_std": 19.637, "distinguishing_score": 0.0078, "distinguishing_method": "anova"}, {"feature_name": "avg_longitude", "cluster_label": 0, "mean
[2026-07-14 20:48:59,538] INFO tianxuan.llm: [LLM REQUEST] model=deepseek-v4-flash
[2026-07-14 20:49:01,818] INFO tianxuan.llm: [LLM RESPONSE] status=200 latency_ms=2282
[2026-07-14 20:49:01,818] INFO tianxuan.llm: [TOOL CALL] name=extract_features args={"cluster_result_id": "clust_58224f0f54f7", "dataset_id": "entity_01d526f18f0b", "method": "zscore"}
[2026-07-14 20:49:01,852] INFO tianxuan.llm: [TOOL RESULT] name=extract_features result={"feature_result_id": "feat_e0c77d0049fb", "features": [{"feature_name": "sni_count", "cluster_label": 0, "mean": 0.0, "std": 0.0, "global_mean": 0.7944, "global_std": 0.4042, "distinguishing_score": -1.9655, "distinguishing_method": "zscore"}, {"feature_name": "avg_duration", "cluster_label": 0, "mean": 19.8145, "std": 20.415, "global_mean": 19.5031, "global_std": 19.637, "distinguishing_score": 0.0159, "distinguishing_method": "zscore"}, {"feature_name": "avg_longitude", "cluster_label": 0, "m
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 20:55:15,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 20:55:15,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 20:55:15,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 20:55:15,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 20:55:15,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 20:55:15,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 20:55:15,484] INFO tianxuan.llm: [LLM] model=deepseek-v4-flash
[2026-07-14 20:55:17,113] INFO tianxuan.llm: [LLM] latency_ms=1641
[2026-07-14 20:55:17,113] INFO tianxuan.llm: [TOOL] profile_data
[2026-07-14 20:55:17,146] INFO tianxuan.llm: [LLM] model=deepseek-v4-flash
[2026-07-14 20:55:19,024] INFO tianxuan.llm: [LLM] latency_ms=1875
[2026-07-14 20:55:19,024] INFO tianxuan.llm: [TOOL] build_entity_profiles
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-14 20:55:19,051] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-14 20:55:19,083] INFO tianxuan.llm: [LLM] model=deepseek-v4-flash
[2026-07-14 20:55:21,617] INFO tianxuan.llm: [LLM] latency_ms=2532
[2026-07-14 20:55:21,617] INFO tianxuan.llm: [TOOL] run_clustering
[2026-07-14 20:55:21,622] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'sni_count']
[2026-07-14 20:55:23,191] INFO tianxuan.llm: [LLM] model=deepseek-v4-flash
[2026-07-14 20:55:25,544] INFO tianxuan.llm: [LLM] latency_ms=2342
[2026-07-14 20:55:25,544] INFO tianxuan.llm: [TOOL] extract_features
[2026-07-14 20:55:31,879] INFO tianxuan.llm: [LLM] model=deepseek-v4-flash
[2026-07-14 20:55:39,270] INFO tianxuan.llm: [LLM] latency_ms=7391
[2026-07-14 21:43:29,031] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 21:43:29,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 21:43:29,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 21:43:29,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 21:43:29,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 21:43:29,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 21:43:29,032] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 21:43:29,035] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 21:43:29,037] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 21:43:29,037] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 21:43:29,037] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-14 21:43:29,048] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-14 21:43:29,570] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=107 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-14 21:43:51,050] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 21:43:51,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 21:43:51,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 21:43:51,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 21:43:51,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 21:44:05,112] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 21:44:05,112] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 21:44:05,112] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 21:44:05,113] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 21:44:05,113] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 21:44:05,113] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 21:44:05,113] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 21:44:05,113] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 21:44:05,113] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 21:44:05,113] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 21:44:05,113] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 21:44:05,114] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 21:44:05,116] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 21:44:05,116] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 21:44:05,116] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 21:44:05,143] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 21:44:05,143] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 21:44:05,143] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 21:44:05,144] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-14 21:44:05,144] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-14 21:44:05,144] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 21:44:05,144] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 21:44:05,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 21:44:05,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 21:44:05,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 21:44:05,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 21:44:05,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-14 21:44:05,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 21:44:05,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-14 21:44:05,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-14 21:44:05,163] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=107 cols=6 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-14 21:44:18,436] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-14 21:44:18,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-14 21:44:18,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-14 21:44:18,439] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-14 21:44:18,439] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-14 21:44:18,439] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-14 21:44:18,439] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-14 21:44:18,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-14 21:44:18,442] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-14 21:44:18,468] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-14 21:44:18,490] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=107 cols=6 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-15 13:19:29,958] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:19:29,960] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:19:29,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:19:29,992] INFO analysis.data_validator: [VALIDATE] dataset=ds rows=5000 columns=24
[2026-07-15 13:19:30,032] WARNING analysis.data_validator: [VALIDATE] Column 'trusted': null rate 55.6% exceeds 50% (high risk)
[2026-07-15 13:19:30,032] INFO analysis.data_validator: [VALIDATE] Complete: valid=False warnings=0 risks=1
[2026-07-15 13:19:35,344] ERROR analysis.data_validator: [VALIDATE] Dataset 'ds' not found in SessionStore
[2026-07-15 13:19:39,751] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:19:39,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:19:39,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:19:39,786] INFO analysis.data_validator: [VALIDATE] dataset=ds rows=5000 columns=24
[2026-07-15 13:19:39,817] WARNING analysis.data_validator: [VALIDATE] Column 'trusted': null rate 55.6% exceeds 50% (high risk)
[2026-07-15 13:19:39,818] INFO analysis.data_validator: [VALIDATE] Complete: valid=False warnings=0 risks=1
[2026-07-15 13:19:39,834] INFO analysis.data_validator: [VALIDATE] dataset=ds rows=5000 columns=24
[2026-07-15 13:19:39,861] WARNING analysis.data_validator: [VALIDATE] Column 'trusted': null rate 55.6% exceeds 50% (high risk)
[2026-07-15 13:19:39,861] INFO analysis.data_validator: [VALIDATE] Complete: valid=False warnings=0 risks=1
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:26:20,969] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:26:20,975] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:26:20,975] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:26:20,975] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:26:20,992] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:26:21,016] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:26:21,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:26:21,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:26:21,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:26:21,625] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:26:47,971] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=2000
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:33:26,581] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:33:26,597] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:33:26,616] INFO analysis.data_validator: [VALIDATE] dataset=ds rows=2000 columns=21
[2026-07-15 13:33:26,629] WARNING analysis.data_validator: [VALIDATE] Column 'trusted': null rate 55.8% exceeds 50% (high risk)
[2026-07-15 13:33:26,629] WARNING analysis.data_validator: [VALIDATE] Column 'cipher_hex_pairs_count': schema type (INT) differs from inferred type (HEX)
[2026-07-15 13:33:26,629] INFO analysis.data_validator: [VALIDATE] Complete: valid=False warnings=1 risks=1
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:33:26,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:33:27,204] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=107 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:34:30,657] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:37:28,067] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:37:28,106] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:37:28,178] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:37:48,271] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:37:48,319] ERROR analysis.views: Traceback (most recent call last):
  File "C:\Users\25044\Desktop\Proj\天璇\analysis\views.py", line 511, in _run_analysis_worker
    raise Exception(result['error'])
Exception: Clustering failed: `is_nan` operation not supported for dtype `str`

This error occurred in the following expression:
	col("src_mac").is_nan()


[2026-07-15 13:39:57,674] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=2000
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:39:57,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:39:57,678] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:39:57,690] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:39:57,706] INFO analysis.data_validator: [VALIDATE] dataset=ds rows=2000 columns=21
[2026-07-15 13:39:57,723] WARNING analysis.data_validator: [VALIDATE] Column 'trusted': null rate 55.8% exceeds 50% (high risk)
[2026-07-15 13:39:57,723] WARNING analysis.data_validator: [VALIDATE] Column 'cipher_hex_pairs_count': schema type (INT) differs from inferred type (HEX)
[2026-07-15 13:39:57,723] INFO analysis.data_validator: [VALIDATE] Complete: valid=False warnings=1 risks=1
[2026-07-15 13:39:57,748] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:39:57,748] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:39:57,753] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:39:57,753] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:39:57,754] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:39:58,307] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=107 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:41:56,661] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 13:42:41,820] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:42:41,820] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:42:41,821] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:42:41,825] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:42:41,844] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:42:41,904] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:43:32,258] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:48:24,328] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:48:24,344] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:48:24,375] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:48:24,950] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:49:19,925] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:49:19,941] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:49:19,989] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:49:39,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:49:39,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:49:39,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:49:39,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:49:39,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:49:39,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:49:39,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:49:39,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:49:39,321] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:49:39,337] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:49:39,371] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:50:01,390] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:50:01,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:50:01,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:50:01,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:50:01,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:50:01,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:50:01,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:50:01,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:50:01,394] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:50:01,406] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:50:01,452] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:50:01,452] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:50:01,452] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:50:01,452] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:50:01,454] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:50:01,454] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:50:01,454] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:50:01,454] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:50:01,454] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:50:01,455] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:50:01,455] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:50:01,455] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:50:01,455] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:50:01,455] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:50:01,455] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:50:02,055] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:50:41,616] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:50:41,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:50:41,616] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:50:41,618] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:50:41,637] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:50:41,664] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:50:42,286] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:50:53,467] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:50:53,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:50:53,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:50:53,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:50:53,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:50:53,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:50:53,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:50:53,469] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:50:53,470] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:50:53,496] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:50:53,531] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:50:53,531] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:50:53,531] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:50:53,531] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:50:53,531] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:50:53,531] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:50:53,531] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:50:53,534] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:50:53,534] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:50:53,534] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:50:53,534] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:50:53,534] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:50:53,534] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:50:53,534] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:50:53,534] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:50:54,086] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:51:27,743] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:51:27,743] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:51:27,743] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:51:27,743] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:51:27,743] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:51:27,743] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:51:27,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:51:27,745] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:51:27,745] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:51:27,745] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:51:27,745] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:51:27,745] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:51:27,745] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:51:27,745] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:51:27,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:51:27,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:51:27,746] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:51:27,761] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:51:27,800] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:51:27,800] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:51:27,800] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:51:27,800] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:51:27,800] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:51:27,800] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:51:27,802] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:51:28,332] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 13:51:58,666] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:51:58,666] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:51:58,682] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:51:58,682] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:51:58,682] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:51:58,682] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:51:58,682] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:51:58,682] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:51:58,682] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:51:58,682] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:51:58,683] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:51:58,698] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:51:58,730] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:51:58,785] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=6 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-15 13:52:15,474] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:52:15,488] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:52:15,509] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:52:15,540] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:52:15,540] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:52:15,540] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:52:15,540] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:52:15,540] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:52:15,550] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:52:15,550] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:52:15,550] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:52:15,550] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:52:15,550] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:52:15,551] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:52:15,551] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:52:15,551] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:52:15,551] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:52:15,552] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:52:15,605] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=6 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-15 13:52:48,596] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:52:48,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:52:48,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:52:48,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:52:48,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:52:48,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:52:48,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:52:48,596] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:52:48,598] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:52:48,611] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:52:48,652] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:52:48,699] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=6 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:53:03,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:53:03,709] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:53:03,727] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:53:03,761] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:53:03,766] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:53:03,766] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:53:03,810] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=6 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:53:52,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:53:52,313] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:53:52,332] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 13:53:52,368] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 13:53:52,433] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=6 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-15 13:59:48,250] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 13:59:48,604] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 13:59:48,604] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 13:59:48,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 13:59:48,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 13:59:48,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 13:59:48,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 13:59:48,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 13:59:48,606] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 13:59:48,606] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 13:59:48,606] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 13:59:48,606] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 13:59:48,606] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 13:59:48,606] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 13:59:48,607] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 13:59:48,607] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 13:59:48,607] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 13:59:48,607] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 13:59:48,607] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 13:59:48,607] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 13:59:48,608] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 13:59:48,608] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 13:59:48,608] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 13:59:48,608] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 13:59:48,608] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 13:59:48,608] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 13:59:48,610] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 13:59:48,636] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 13:59:49,129] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 14:00:09,736] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 14:00:09,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 14:00:09,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 14:00:09,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 14:00:09,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 14:00:09,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 14:00:09,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 14:00:09,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 14:00:09,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 14:00:09,743] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 14:00:09,743] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 14:00:09,743] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 14:00:09,744] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 14:00:09,769] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 14:01:25,384] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 14:01:25,409] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 14:01:25,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 14:01:26,004] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 14:02:02,520] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 14:02:02,520] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 14:02:02,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 14:02:02,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 14:02:02,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 14:02:02,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 14:02:02,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 14:02:02,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 14:02:02,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 14:02:02,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 14:02:02,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 14:02:02,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 14:02:02,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 14:02:02,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 14:02:02,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 14:02:02,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 14:02:02,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 14:02:02,524] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 14:02:02,543] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 14:02:02,573] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 14:02:02,573] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 14:02:02,581] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 14:02:02,581] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 14:02:02,582] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 14:02:02,582] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 14:02:02,582] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 14:02:02,582] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 14:02:02,582] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 14:02:02,582] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 14:02:02,582] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 14:02:02,582] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 14:02:02,584] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 14:02:02,584] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 14:02:02,584] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 14:02:03,179] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 14:02:09,445] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=6 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 14:03:04,226] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 14:03:04,230] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 14:03:04,230] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 14:03:04,230] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 14:03:04,230] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 14:03:04,230] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 14:03:04,230] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 14:03:04,230] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 14:03:04,250] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 14:03:04,287] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 14:03:04,287] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 14:03:04,287] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 14:03:04,289] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-15 14:03:04,291] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=cipher_hex_pairs_count dtype=UInt32
[2026-07-15 14:03:04,894] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 14:04:19,423] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 14:04:19,702] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 14:04:19,702] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 14:04:19,702] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 14:04:19,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 14:04:19,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 14:04:19,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 14:04:19,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 14:04:19,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 14:04:19,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 14:04:19,704] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 14:04:19,704] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 14:04:19,704] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 14:04:19,704] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 14:04:19,704] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 14:04:19,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 14:04:19,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 14:04:19,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 14:04:19,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 14:04:19,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 14:04:19,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 14:04:19,706] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 14:04:19,706] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 14:04:19,706] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 14:04:19,706] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 14:04:19,706] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 14:04:19,707] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 14:04:19,724] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 14:05:12,323] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 14:05:12,562] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 14:05:12,562] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 14:05:12,564] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 14:05:12,564] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 14:05:12,564] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 14:05:12,564] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 14:05:12,564] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 14:05:12,564] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 14:05:12,564] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 14:05:12,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 14:05:12,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 14:05:12,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 14:05:12,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 14:05:12,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 14:05:12,567] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 14:05:12,581] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 14:11:19,574] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 14:11:34,146] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 15:51:36,539] INFO analysis.data_loader: [CLEAN] dropped columns: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 15:51:36,572] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp', 'src_mac', 'dst_mac']
[2026-07-15 15:51:36,574] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 15:56:01,031] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 15:56:21,684] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 15:56:29,874] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 15:56:34,510] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 15:56:49,849] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 15:57:10,814] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 15:57:36,799] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 16:01:55,401] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 19:40:14,813] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 19:40:24,609] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 19:40:25,567] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:40:25,568] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:40:25,568] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:40:25,568] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:40:25,568] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:40:25,568] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:40:25,568] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:40:25,568] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:40:25,569] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:40:25,570] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:40:25,570] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:40:25,570] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:40:25,570] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:40:25,570] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:40:25,570] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:40:25,570] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:40:25,571] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:40:25,575] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:40:40,629] ERROR django.request: Internal Server Error: /analyze/manual/
Traceback (most recent call last):
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\django\core\handlers\exception.py", line 55, in inner
    response = get_response(request)
               ^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\django\core\handlers\base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\analysis\views.py", line 443, in manual_page
    cfg = get_config()
          ^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\config\loader.py", line 60, in get_config
    data = yaml.safe_load(f) or {}
           ^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\__init__.py", line 125, in safe_load
    return load(stream, SafeLoader)
           ^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\__init__.py", line 79, in load
    loader = Loader(stream)
             ^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\loader.py", line 34, in __init__
    Reader.__init__(self, stream)
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 85, in __init__
    self.determine_encoding()
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 124, in determine_encoding
    self.update_raw()
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 178, in update_raw
    data = self.stream.read(size)
           ^^^^^^^^^^^^^^^^^^^^^^
UnicodeDecodeError: 'gbk' codec can't decode byte 0xae in position 204: illegal multibyte sequence
[2026-07-15 19:47:49,319] ERROR django.request: Internal Server Error: /analyze/manual/
Traceback (most recent call last):
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\django\core\handlers\exception.py", line 55, in inner
    response = get_response(request)
               ^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\django\core\handlers\base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\analysis\views.py", line 443, in manual_page
    cfg = get_config()
          ^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\config\loader.py", line 60, in get_config
    data = yaml.safe_load(f) or {}
           ^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\__init__.py", line 125, in safe_load
    return load(stream, SafeLoader)
           ^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\__init__.py", line 79, in load
    loader = Loader(stream)
             ^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\loader.py", line 34, in __init__
    Reader.__init__(self, stream)
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 85, in __init__
    self.determine_encoding()
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 124, in determine_encoding
    self.update_raw()
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 178, in update_raw
    data = self.stream.read(size)
           ^^^^^^^^^^^^^^^^^^^^^^
UnicodeDecodeError: 'gbk' codec can't decode byte 0xae in position 204: illegal multibyte sequence
[2026-07-15 19:47:49,494] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 19:48:14,713] ERROR django.request: Internal Server Error: /analyze/manual/
Traceback (most recent call last):
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\django\core\handlers\exception.py", line 55, in inner
    response = get_response(request)
               ^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\django\core\handlers\base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\analysis\views.py", line 443, in manual_page
    cfg = get_config()
          ^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\config\loader.py", line 60, in get_config
    data = yaml.safe_load(f) or {}
           ^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\__init__.py", line 125, in safe_load
    return load(stream, SafeLoader)
           ^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\__init__.py", line 79, in load
    loader = Loader(stream)
             ^^^^^^^^^^^^^^
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\loader.py", line 34, in __init__
    Reader.__init__(self, stream)
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 85, in __init__
    self.determine_encoding()
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 124, in determine_encoding
    self.update_raw()
  File "C:\Users\25044\Desktop\Proj\天璇\runtime\python\Lib\site-packages\yaml\reader.py", line 178, in update_raw
    data = self.stream.read(size)
           ^^^^^^^^^^^^^^^^^^^^^^
UnicodeDecodeError: 'gbk' codec can't decode byte 0xae in position 204: illegal multibyte sequence
[2026-07-15 19:49:00,923] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 19:49:01,215] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:49:01,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:49:01,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:49:01,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:49:01,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:49:01,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:49:01,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:49:01,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:49:01,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:49:01,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:49:01,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:49:01,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:49:01,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:49:01,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:49:01,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:49:01,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:49:01,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:49:01,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:49:01,219] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:49:01,219] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:49:01,219] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:49:01,219] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:49:01,219] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:49:01,220] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:49:01,220] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:49:01,225] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:49:50,322] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:49:50,323] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:49:50,323] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:49:50,323] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:49:50,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:49:50,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:49:50,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:49:50,325] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:49:50,325] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:49:50,325] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:49:50,326] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:49:50,326] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:49:50,326] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:49:50,326] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:49:50,327] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:49:50,327] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:49:50,327] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:49:50,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:49:50,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:49:50,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:49:50,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:49:50,329] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:49:50,329] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:49:50,329] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:49:50,329] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:49:50,364] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:50:32,087] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:50:32,088] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:50:32,088] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:50:32,088] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:50:32,089] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:50:32,089] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:50:32,089] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:50:32,089] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:50:32,090] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:50:32,090] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:50:32,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:50:32,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:50:32,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:50:32,092] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:50:32,092] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:50:32,092] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:50:32,093] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:50:32,093] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:50:32,093] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:50:32,093] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:50:32,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:50:32,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:50:32,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:50:32,095] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:50:32,095] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:50:32,122] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:51:11,057] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:51:11,057] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:51:11,057] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:51:11,063] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:51:11,063] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:51:11,063] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:51:11,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:51:11,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:51:11,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:51:11,089] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:51:11,872] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:57:07,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:57:07,326] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:57:07,326] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:57:07,326] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:57:07,326] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:57:07,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:57:07,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:57:07,328] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:57:07,329] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:57:07,329] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:57:07,329] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:57:07,330] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:57:07,330] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:57:07,330] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:57:07,331] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:57:07,367] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:57:07,748] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 19:57:42,900] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:57:42,900] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:57:42,900] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:57:42,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:57:42,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:57:42,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:57:42,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:57:42,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:57:42,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:57:42,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:57:42,913] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:57:42,913] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:57:42,913] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:57:42,913] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:57:42,938] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:57:51,240] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:57:51,242] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:57:51,246] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:57:51,248] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:57:51,270] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:57:51,680] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 19:57:52,498] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:57:52,498] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:57:52,498] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:57:52,498] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:57:52,499] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:57:52,499] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:57:52,500] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:57:52,525] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:57:52,952] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:58:24,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:58:24,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:58:24,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:58:24,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:58:24,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:58:24,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:58:24,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:58:24,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:58:24,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:58:24,779] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:58:25,217] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 19:58:36,410] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:58:36,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:58:36,414] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:58:36,418] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:58:36,418] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:58:36,418] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:58:36,418] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:58:36,418] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:58:36,418] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:58:36,418] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:58:36,418] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:58:36,420] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:58:36,420] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:58:36,438] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:58:36,874] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 19:59:56,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 19:59:56,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 19:59:56,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 19:59:56,164] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 19:59:56,541] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 20:00:18,048] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:00:18,049] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:00:18,049] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:00:18,050] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:00:18,050] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:00:18,050] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:00:18,051] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:00:18,051] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:00:18,051] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:00:18,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:00:18,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:00:18,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:00:18,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:00:18,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:00:18,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:00:18,053] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:00:18,054] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:00:18,054] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:00:18,054] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:00:18,055] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:00:18,055] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:00:18,055] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:00:18,055] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:00:18,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:00:18,056] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:00:18,081] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:00:24,798] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:00:24,798] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:00:24,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:00:24,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:00:24,800] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:00:24,800] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:00:24,800] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:00:24,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:00:24,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:00:24,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:00:24,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:00:24,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:00:24,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:00:24,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:00:24,803] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:00:24,803] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:00:24,803] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:00:24,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:00:24,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:00:24,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:00:24,804] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:00:24,805] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:00:24,805] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:00:24,805] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:00:24,805] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:00:24,832] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:00:51,584] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:00:51,585] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:00:51,585] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:00:51,586] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:00:51,586] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:00:51,586] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:00:51,587] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:00:51,587] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:00:51,587] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:00:51,588] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:00:51,588] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:00:51,588] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:00:51,589] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:00:51,589] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:00:51,589] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:00:51,589] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:00:51,590] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:00:51,590] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:00:51,590] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:00:51,591] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:00:51,591] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:00:51,591] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:00:51,591] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:00:51,592] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:00:51,592] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:00:51,617] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:02:53,951] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:02:53,951] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:02:53,952] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:02:53,952] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:02:53,952] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:02:53,953] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:02:53,953] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:02:53,953] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:02:53,954] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:02:53,954] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:02:53,954] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:02:53,955] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:02:53,955] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:02:53,956] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:02:53,956] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:02:53,956] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:02:53,957] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:02:53,957] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:02:53,957] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:02:53,957] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:02:53,957] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:02:53,958] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:02:53,958] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:02:53,958] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:02:53,959] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:02:53,983] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:03:02,137] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:03:02,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:03:02,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:03:02,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:03:02,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:03:02,139] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:03:02,139] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:03:02,139] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:03:02,140] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:03:02,140] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:03:02,140] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:03:02,140] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:03:02,141] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:03:02,141] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:03:02,141] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:03:02,141] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:03:02,142] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:03:02,142] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:03:02,142] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:03:02,142] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:03:02,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:03:02,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:03:02,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:03:02,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:03:02,144] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:03:02,168] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:07:07,906] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:07:07,907] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:07:07,907] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:07:07,907] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:07:07,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:07:07,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:07:07,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:07:07,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:07:07,908] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:07:07,909] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:07:07,909] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:07:07,909] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:07:07,909] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:07:07,909] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:07:07,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:07:07,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:07:07,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:07:07,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:07:07,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:07:07,910] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:07:07,911] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:07:07,911] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:07:07,911] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:07:07,912] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:07:07,912] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:07:07,931] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:07:22,783] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:07:22,783] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:07:22,784] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:07:22,784] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:07:22,784] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:07:22,785] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:07:22,785] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:07:22,785] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:07:22,785] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:07:22,785] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:07:22,786] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:07:22,786] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:07:22,786] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:07:22,786] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:07:22,786] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:07:22,787] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:07:22,787] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:07:22,787] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:07:22,787] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:07:22,787] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:07:22,787] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:07:22,787] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:07:22,788] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:07:22,788] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:07:22,788] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:07:22,806] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:09:33,021] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:09:33,021] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:09:33,023] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:09:33,023] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:09:33,023] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:09:33,023] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:09:33,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:09:33,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:09:33,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:09:33,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:09:33,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:09:33,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:09:33,025] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:09:33,025] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:09:33,025] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:09:33,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:09:33,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:09:33,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:09:33,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:09:33,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:09:33,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:09:33,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:09:33,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:09:33,028] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:09:33,028] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:09:33,055] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:09:39,987] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:09:39,987] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:09:39,988] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:09:39,988] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:09:39,988] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:09:39,988] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:09:39,990] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:09:39,990] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:09:39,990] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:09:39,990] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:09:39,990] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:09:39,991] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:09:39,991] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:09:39,991] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:09:39,991] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:09:39,992] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:09:39,992] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:09:39,992] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:09:39,992] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:09:39,993] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:09:39,993] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:09:39,993] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:09:39,993] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:09:39,993] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:09:39,994] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:09:40,021] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:09:40,428] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 20:09:40,912] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:09:40,912] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:09:40,913] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:09:40,913] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:09:40,913] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:09:40,913] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:09:40,914] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:09:40,914] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:09:40,914] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:09:40,914] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:09:40,915] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:09:40,915] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:09:40,915] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:09:40,915] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:09:40,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:09:40,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:09:40,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:09:40,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:09:40,917] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:09:40,917] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:09:40,917] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:09:40,917] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:09:40,918] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:09:40,918] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:09:40,918] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:09:40,938] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:09:41,128] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:09:41,129] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:09:41,129] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:09:41,129] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:09:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:09:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:09:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:09:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:09:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:09:41,131] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:09:41,131] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:09:41,131] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:09:41,131] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:09:41,131] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:09:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:09:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:09:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:09:41,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:09:41,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:09:41,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:09:41,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:09:41,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:09:41,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:09:41,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:09:41,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:09:41,164] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:09:41,598] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 20:11:41,423] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:11:41,797] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:11:41,798] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:11:41,798] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:11:41,798] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:11:41,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:11:41,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:11:41,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:11:41,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:11:41,800] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:11:41,800] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:11:41,800] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:11:41,800] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:11:41,800] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:11:41,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:11:41,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:11:41,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:11:41,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:11:41,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:11:41,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:11:41,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:11:41,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:11:41,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:11:41,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:11:41,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:11:41,802] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:11:41,841] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:15:38,432] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:15:38,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:15:38,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:15:38,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:15:38,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:15:38,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:15:38,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:15:38,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:15:38,435] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:15:38,435] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:15:38,435] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:15:38,435] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:15:38,435] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:15:38,435] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:15:38,435] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:15:38,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:15:38,463] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:17:54,796] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:17:55,184] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:17:55,184] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:17:55,184] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:17:55,184] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:17:55,184] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:17:55,184] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:17:55,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:17:55,226] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:17:55,764] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 20:22:33,026] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:22:33,505] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:22:33,506] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:22:33,506] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:22:33,507] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:22:33,507] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:22:33,507] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:22:33,507] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:22:33,509] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:22:33,509] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:22:33,509] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:22:33,509] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:22:33,510] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:22:33,510] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:22:33,510] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:22:33,511] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:22:33,511] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:22:33,511] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:22:33,511] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:22:33,512] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:22:33,512] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:22:33,512] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:22:33,512] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:22:33,513] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:22:33,513] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:22:33,513] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:22:33,561] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:25:53,760] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:25:54,026] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:25:54,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:25:54,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:25:54,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:25:54,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:25:54,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:25:54,028] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:25:54,028] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:25:54,028] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:25:54,028] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:25:54,028] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:25:54,029] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:25:54,029] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:25:54,029] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:25:54,029] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:25:54,029] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:25:54,029] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:25:54,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:25:54,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:25:54,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:25:54,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:25:54,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:25:54,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:25:54,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:25:54,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:25:54,053] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:26:50,678] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:26:51,132] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:26:51,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:26:51,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:26:51,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:26:51,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:26:51,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:26:51,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:26:51,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:26:51,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:26:51,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:26:51,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:26:51,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:26:51,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:26:51,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:26:51,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:26:51,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:26:51,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:26:51,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:26:51,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:26:51,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:26:51,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:26:51,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:26:51,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:26:51,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:26:51,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:26:51,168] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:26:56,761] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:26:56,761] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:26:56,761] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:26:56,762] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:26:56,762] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:26:56,763] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:26:56,763] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:26:56,763] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:26:56,764] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:26:56,764] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:26:56,764] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:26:56,765] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:26:56,765] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:26:56,765] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:26:56,765] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:26:56,766] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:26:56,766] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:26:56,766] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:26:56,766] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:26:56,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:26:56,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:26:56,767] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:26:56,768] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:26:56,768] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:26:56,768] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:26:56,808] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:27:04,386] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-15 20:28:21,304] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:28:21,305] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:28:21,305] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:28:21,305] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:28:21,305] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:28:21,306] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:28:21,306] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:28:21,307] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:28:21,307] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:28:21,307] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:28:21,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:28:21,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:28:21,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:28:21,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:28:21,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:28:21,309] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:28:21,309] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:28:21,309] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:28:21,309] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:28:21,309] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:28:21,309] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:28:21,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:28:21,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:28:21,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:28:21,310] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:28:21,329] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:29:08,320] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:29:08,320] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:29:08,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:29:08,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:29:08,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:29:08,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:29:08,321] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:29:08,322] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:29:08,322] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:29:08,322] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:29:08,322] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:29:08,322] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:29:08,322] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:29:08,323] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:29:08,323] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:29:08,323] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:29:08,323] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:29:08,323] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:29:08,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:29:08,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:29:08,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:29:08,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:29:08,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:29:08,324] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:29:08,325] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:29:08,344] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:29:12,382] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:29:12,383] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:29:12,383] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:29:12,383] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:29:12,383] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:29:12,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:29:12,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:29:12,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:29:12,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:29:12,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:29:12,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:29:12,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:29:12,386] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:29:12,386] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:29:12,386] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:29:12,387] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:29:12,387] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:29:12,387] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:29:12,387] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:29:12,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:29:12,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:29:12,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:29:12,388] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:29:12,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:29:12,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:29:12,407] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:29:56,226] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:29:56,836] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:29:56,836] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:29:56,836] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:29:56,837] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:29:56,837] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:29:56,837] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:29:56,838] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:29:56,838] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:29:56,838] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:29:56,839] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:29:56,839] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:29:56,839] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:29:56,839] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:29:56,840] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:29:56,840] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:29:56,840] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:29:56,841] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:29:56,841] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:29:56,841] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:29:56,842] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:29:56,842] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:29:56,842] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:29:56,842] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:29:56,843] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:29:56,843] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:29:56,881] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:30:11,880] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-15 20:31:51,172] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:31:51,474] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:31:51,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:31:51,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:31:51,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:31:51,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:31:51,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:31:51,476] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:31:51,478] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:31:51,478] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:31:51,478] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:31:51,478] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:31:51,478] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:31:51,478] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:31:51,498] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:31:59,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:31:59,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:31:59,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:31:59,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:31:59,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:31:59,755] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:31:59,757] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:31:59,757] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:31:59,757] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:31:59,794] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:32:00,181] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 20:32:52,007] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:33:45,829] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:33:45,845] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:33:45,861] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:34:22,094] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:34:22,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:34:22,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:34:22,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:34:22,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:34:22,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:34:22,094] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:34:22,096] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:34:22,098] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:34:22,098] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:34:22,098] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:34:22,098] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:34:22,098] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:34:22,098] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:34:22,098] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:34:22,116] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:34:30,438] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:34:30,447] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:34:30,447] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:34:30,448] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:34:30,448] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:34:30,448] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:34:30,448] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:34:30,448] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:34:30,486] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:34:30,826] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 20:35:15,207] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:35:15,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:35:15,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:35:15,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:35:15,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:35:15,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:35:15,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:35:15,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:35:15,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:35:15,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:35:15,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:35:15,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:35:15,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:35:15,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:35:15,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:35:15,252] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:35:20,145] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:35:20,145] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:35:20,145] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:35:20,147] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:35:20,147] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:35:20,147] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:35:20,147] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:35:20,147] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:35:20,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:35:20,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:35:20,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:35:20,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:35:20,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:35:20,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:35:20,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:35:20,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:35:20,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:35:20,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:35:20,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:35:20,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:35:20,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:35:20,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:35:20,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:35:20,154] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:35:20,154] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:35:20,187] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:36:02,149] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:36:02,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:36:02,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:36:02,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:36:02,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:36:02,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:36:02,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:36:02,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:36:02,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:36:02,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:36:02,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:36:02,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:36:02,151] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:36:02,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:36:02,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:36:02,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:36:02,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:36:02,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:36:02,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:36:02,155] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:36:02,155] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:36:02,155] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:36:02,155] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:36:02,155] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:36:02,155] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:36:02,176] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:36:23,408] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:36:24,534] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:36:24,534] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:36:24,534] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:36:24,534] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:36:24,534] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:36:24,536] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:36:24,538] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:36:24,540] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:36:24,559] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:36:29,052] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:36:29,061] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:36:29,084] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:38:18,979] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 20:38:22,039] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 20:39:13,898] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:39:14,426] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:39:14,427] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:39:14,427] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:39:14,428] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:39:14,428] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:39:14,428] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:39:14,429] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:39:14,429] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:39:14,429] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:39:14,430] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:39:14,430] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:39:14,430] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:39:14,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:39:14,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:39:14,431] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:39:14,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:39:14,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:39:14,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:39:14,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:39:14,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:39:14,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:39:14,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:39:14,434] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:39:14,434] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:39:14,434] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:39:14,460] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:40:15,861] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:40:17,206] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:40:17,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:40:17,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:40:17,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:40:17,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:40:17,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:40:17,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:40:17,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:40:17,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:40:17,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:40:17,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:40:17,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:40:17,209] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:40:17,209] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:40:17,209] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:40:17,209] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:40:17,210] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:40:17,242] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:40:55,545] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:40:55,945] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:40:55,986] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:45:05,991] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:45:07,143] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:45:07,158] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:45:07,158] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:45:07,158] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:45:07,158] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:45:07,158] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:45:07,158] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:45:07,158] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:45:07,158] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:45:07,178] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:47:17,697] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:47:18,252] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:47:18,253] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:47:18,253] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:47:18,254] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:47:18,254] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:47:18,254] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:47:18,255] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:47:18,255] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:47:18,255] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:47:18,255] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:47:18,256] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:47:18,256] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:47:18,256] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:47:18,257] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:47:18,257] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:47:18,257] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:47:18,258] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:47:18,258] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:47:18,258] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:47:18,259] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:47:18,259] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:47:18,259] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:47:18,259] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:47:18,260] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:47:18,260] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:47:18,293] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:49:45,437] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:49:46,601] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:49:46,601] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:49:46,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:49:46,627] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:51:02,358] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:51:02,783] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:51:02,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:51:02,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:51:02,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:51:02,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:51:02,801] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:51:02,841] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 20:59:22,858] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 20:59:23,980] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 20:59:23,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 20:59:23,982] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 20:59:23,982] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 20:59:23,982] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 20:59:23,982] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 20:59:23,982] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 20:59:23,982] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 20:59:23,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 20:59:23,986] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 20:59:23,986] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 20:59:23,986] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 20:59:23,986] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 20:59:24,008] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:00:27,289] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:00:27,746] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:00:27,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:00:27,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:00:27,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:00:27,747] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:00:27,748] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:00:27,748] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:00:27,749] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:00:27,749] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:00:27,749] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:00:27,749] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:00:27,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:00:27,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:00:27,750] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:00:27,751] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:00:27,751] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:00:27,751] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:00:27,751] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:00:27,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:00:27,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:00:27,752] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:00:27,753] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:00:27,753] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:00:27,753] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:00:27,753] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:00:27,793] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:00:35,207] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-15 21:01:25,460] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:01:26,376] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:01:26,392] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:01:26,411] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:01:49,677] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:01:49,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:01:49,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:01:49,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:01:49,680] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:01:49,683] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:01:49,718] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:01:50,557] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 21:02:54,766] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:02:55,724] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:02:55,724] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:02:55,726] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:02:55,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:02:55,750] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:03:35,490] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:03:35,880] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:03:35,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:03:35,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:03:35,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:03:35,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:03:35,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:03:35,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:03:35,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:03:35,883] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:03:35,883] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:03:35,883] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:03:35,883] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:03:35,884] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:03:35,884] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:03:35,884] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:03:35,885] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:03:35,885] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:03:35,885] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:03:35,885] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:03:35,886] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:03:35,886] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:03:35,886] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:03:35,886] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:03:35,887] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:03:35,887] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:03:35,929] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:03:40,572] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:03:40,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:03:40,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:03:40,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:03:40,574] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:03:40,574] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:03:40,574] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:03:40,574] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:03:40,575] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:03:40,575] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:03:40,575] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:03:40,575] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:03:40,576] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:03:40,576] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:03:40,576] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:03:40,576] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:03:40,577] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:03:40,577] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:03:40,577] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:03:40,578] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:03:40,578] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:03:40,578] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:03:40,579] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:03:40,579] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:03:40,579] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:03:40,612] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:03:41,726] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 21:04:07,165] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 21:04:08,820] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:04:09,218] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:04:09,260] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:09:15,725] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:09:16,035] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:09:16,035] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:09:16,035] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:09:16,042] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:09:16,044] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:09:16,055] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:09:16,275] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:09:16,289] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:09:16,289] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:09:16,289] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:09:16,308] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:09:25,697] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:09:25,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:09:25,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:09:25,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:09:25,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:09:25,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:09:25,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:09:25,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:09:25,722] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:10:52,562] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:10:53,122] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:10:53,122] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:10:53,122] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:10:53,122] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:10:53,122] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:10:53,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:10:53,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:10:53,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:10:53,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:10:53,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:10:53,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:10:53,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:10:53,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:10:53,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:10:53,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:10:53,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:10:53,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:10:53,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:10:53,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:10:53,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:10:53,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:10:53,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:10:53,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:10:53,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:10:53,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:10:53,168] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:13:11,370] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:13:12,330] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:13:12,334] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:13:12,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:13:12,338] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:13:12,338] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:13:12,338] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:13:12,358] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:14:43,337] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:14:43,903] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:14:43,903] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:14:43,904] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:14:43,904] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:14:43,904] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:14:43,904] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:14:43,905] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:14:43,905] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:14:43,905] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:14:43,906] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:14:43,940] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:15:42,439] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:15:43,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:15:43,396] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:15:49,440] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:15:49,443] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:15:49,443] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:15:49,443] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:15:49,443] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:15:49,443] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:15:49,443] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:15:49,443] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:15:49,445] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:15:49,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:15:49,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:15:49,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:15:49,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:15:49,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:15:49,488] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:15:49,860] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 21:16:37,269] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:16:39,014] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:16:39,014] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:16:39,015] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:16:39,015] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:16:39,015] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:16:39,016] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:16:39,016] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:16:39,016] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:16:39,017] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:16:39,017] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:16:39,018] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:16:39,018] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:16:39,018] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:16:39,019] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:16:39,019] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:16:39,019] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:16:39,020] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:16:39,020] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:16:39,020] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:16:39,021] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:16:39,021] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:16:39,021] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:16:39,022] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:16:39,022] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:16:39,023] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:16:39,059] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:17:00,197] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:17:00,197] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:17:00,198] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:17:00,199] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:17:00,199] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:17:00,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:17:00,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:17:00,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:17:00,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:17:00,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:17:00,202] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:17:00,202] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:17:00,202] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:17:00,203] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:17:00,203] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:17:00,204] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:17:00,204] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:17:00,204] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:17:00,205] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:17:00,205] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:17:00,205] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:17:00,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:17:00,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:17:00,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:17:00,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:17:00,234] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:17:11,697] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:17:11,698] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:17:11,698] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:17:11,698] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:17:11,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:17:11,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:17:11,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:17:11,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:17:11,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:17:11,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:17:11,701] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:17:11,701] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:17:11,701] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:17:11,702] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:17:11,702] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:17:11,702] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:17:11,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:17:11,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:17:11,703] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:17:11,704] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:17:11,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:17:11,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:17:11,705] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:17:11,706] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:17:11,706] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:17:11,743] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:17:41,119] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:17:41,120] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:17:41,120] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:17:41,121] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:17:41,121] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:17:41,121] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:17:41,122] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:17:41,122] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:17:41,122] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:17:41,122] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:17:41,123] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:17:41,123] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:17:41,123] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:17:41,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:17:41,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:17:41,124] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:17:41,125] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:17:41,125] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:17:41,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:17:41,126] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:17:41,127] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:17:41,127] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:17:41,127] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:17:41,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:17:41,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:17:41,165] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:18:11,324] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:18:11,609] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:18:11,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:18:11,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:18:11,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:18:11,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:18:11,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:18:11,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:18:11,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:18:11,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:18:11,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:18:11,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:18:11,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:18:11,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:18:11,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:18:11,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:18:11,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:18:11,613] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:18:11,613] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:18:11,613] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:18:11,613] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:18:11,613] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:18:11,614] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:18:11,614] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:18:11,614] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:18:11,614] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:18:11,644] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:20:24,970] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:20:25,407] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:20:25,413] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:20:25,429] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:20:56,973] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:20:57,382] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:20:57,423] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:37:10,771] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:37:11,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:37:11,198] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:37:11,198] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:37:11,198] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:37:11,198] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:37:11,218] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:37:38,730] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:37:39,063] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:37:39,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:37:39,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:37:39,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:37:39,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:37:39,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:37:39,065] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:37:39,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:37:39,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:37:39,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:37:39,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:37:39,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:37:39,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:37:39,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:37:39,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:37:39,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:37:39,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:37:39,068] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:37:39,068] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:37:39,068] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:37:39,068] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:37:39,069] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:37:39,069] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:37:39,069] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:37:39,069] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:37:39,092] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:37:41,128] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:37:41,129] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:37:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:37:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:37:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:37:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:37:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:37:41,130] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:37:41,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:37:41,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:37:41,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:37:41,132] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:37:41,133] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:37:41,173] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:37:46,981] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:37:46,982] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:37:46,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:37:46,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:37:46,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:37:46,984] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:37:46,984] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:37:46,984] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:37:46,984] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:37:46,984] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:37:46,984] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:37:46,984] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:37:46,985] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:37:46,985] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:37:46,985] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:37:46,985] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:37:46,985] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:37:46,986] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:37:46,986] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:37:46,986] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:37:46,986] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:37:46,987] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:37:46,987] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:37:46,987] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:37:46,987] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:37:47,022] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:37:48,061] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 21:39:30,224] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:39:30,654] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:39:30,682] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:42:16,221] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:42:16,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:42:16,545] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:43:08,317] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:43:08,686] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:43:08,686] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:43:08,686] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:43:08,686] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:43:08,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:43:08,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:43:08,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:43:08,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:43:08,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:43:08,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:43:08,702] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:43:08,702] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:43:08,740] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:43:25,277] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-15 21:43:45,599] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:43:45,599] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:43:45,599] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:43:45,600] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:43:45,600] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:43:45,600] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:43:45,600] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:43:45,600] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:43:45,601] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:43:45,601] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:43:45,601] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:43:45,601] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:43:45,601] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:43:45,602] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:43:45,602] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:43:45,602] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:43:45,602] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:43:45,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:43:45,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:43:45,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:43:45,603] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:43:45,604] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:43:45,604] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:43:45,604] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:43:45,604] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:43:45,637] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:45:20,277] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:45:20,672] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:45:20,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:45:20,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:45:20,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:45:20,676] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:45:20,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:45:20,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:45:20,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:45:20,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:45:20,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:45:20,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:45:20,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:45:20,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:45:20,694] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:53:24,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:53:24,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:53:24,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:53:24,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:53:24,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:53:24,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:53:24,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:53:24,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:53:24,153] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:53:24,155] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:53:24,162] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 21:53:24,211] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 21:53:24,215] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 21:53:24,215] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 21:53:24,215] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 21:53:24,215] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 21:53:24,215] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 21:53:24,215] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 21:53:34,700] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 21:53:34,700] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 21:53:34,700] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 21:53:34,700] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 21:53:34,700] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 21:53:34,700] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 21:53:34,700] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 21:53:34,706] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 21:53:34,706] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 21:53:34,706] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 21:53:34,706] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 21:53:34,706] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 21:53:34,706] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 21:53:34,706] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 21:53:34,706] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 21:53:34,728] ERROR analysis.views: Traceback (most recent call last):
  File "C:\Users\25044\Desktop\Proj\天璇\analysis\views.py", line 551, in _run_analysis_worker
    raise Exception(err)
Exception: No numeric cluster columns found in dataset. Available: ['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports', 'unique_dst_networks', 'unique_ciphers', 'unique_versions', 'sni_count', 'unique_protocols', 'avg_latitude', 'avg_longitude', 'first_seen', 'last_seen', 'active_hours_count']。可用数值列: ['flow_count(UInt32)', 'total_bytes_sent(Int64)', 'total_bytes_rev(Int64)', 'avg_duration(Float64)', 'total_packets(Int64)', 'total_packets_rev(Int64)', 'unique_dst_ips(UInt32)', 'unique_dst_ports(UInt32)', 'unique_dst_networks(UInt32)', 'unique_ciphers(UInt32)', 'unique_versions(UInt32)', 'sni_count(UInt32)', 'unique_protocols(UInt32)', 'avg_latitude(Float64)', 'avg_longitude(Float64)', 'first_seen(Float64)', 'last_seen(Float64)', 'active_hours_count(UInt32)']

[2026-07-15 21:53:50,028] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 21:53:50,079] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 21:53:50,079] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:53:50,079] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:53:50,080] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 21:53:50,080] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:53:50,080] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 21:53:50,080] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:53:50,081] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:53:50,081] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:53:50,081] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 21:53:50,081] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:53:50,082] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 21:53:50,082] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:53:50,082] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 21:53:50,082] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:53:50,083] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 21:53:50,083] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:53:50,083] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 21:53:50,083] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 21:53:50,084] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 21:53:50,084] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 21:53:50,084] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 21:53:50,085] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:53:50,085] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:53:50,085] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 21:53:50,114] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 21:56:25,793] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 21:56:25,793] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 21:56:26,527] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:12:53,340] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 22:12:53,719] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:12:53,720] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:12:53,720] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:12:53,721] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:12:53,721] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:12:53,721] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:12:53,721] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:12:53,721] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:12:53,721] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:12:53,722] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:12:53,722] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:12:53,722] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:12:53,723] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:12:53,723] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:12:53,723] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:12:53,723] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:12:53,723] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:12:53,733] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:12:53,734] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:12:53,734] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:12:53,734] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:41:44,383] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:41:44,383] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:41:44,383] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:41:44,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:41:44,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:41:44,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:41:44,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:41:44,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:41:44,384] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:41:44,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:41:44,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:41:44,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:41:44,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:41:44,385] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:41:44,386] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:41:44,386] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:41:44,386] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:41:44,393] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:41:44,393] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:41:44,393] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:41:44,393] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:41:44,429] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:41:46,801] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:41:46,801] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:41:46,801] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:41:46,801] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:41:46,817] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:41:46,820] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:41:46,820] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:41:46,849] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:41:48,295] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 22:41:48,379] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:41:48,379] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:41:48,379] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:41:48,379] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:41:48,379] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:41:48,379] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:41:48,381] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:41:48,383] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:41:48,388] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:41:48,388] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:41:48,390] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:41:48,390] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:41:48,422] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:41:48,424] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:41:48,424] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:41:48,424] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:41:48,424] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:41:48,424] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:41:48,424] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:41:48,426] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:41:48,426] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:41:48,426] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:41:48,426] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:41:48,426] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:41:48,426] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:41:48,426] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:41:48,426] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:41:50,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:41:50,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:41:50,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:41:50,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:41:50,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:41:50,433] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:41:50,458] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:41:52,491] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:41:52,491] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:41:52,491] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:41:52,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:41:52,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:41:52,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:41:52,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:41:52,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:41:52,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:41:52,502] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:41:52,504] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:41:52,504] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:41:52,504] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:41:52,581] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:41:52,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:41:52,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:41:52,581] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:41:52,583] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:41:52,585] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:41:52,585] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:41:52,585] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:41:52,589] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:41:52,592] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:41:52,592] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:41:52,592] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:41:52,625] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:41:54,606] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:41:54,631] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:41:56,637] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:41:56,652] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:41:56,652] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:41:56,652] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:41:56,652] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:41:56,697] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:41:56,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:41:56,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:41:56,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:41:56,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:41:56,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:41:56,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:41:56,699] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:41:56,700] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:41:56,706] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:41:56,706] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:41:56,706] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:41:56,706] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:41:56,736] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:41:58,727] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:41:58,732] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:41:58,758] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:00,809] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:00,880] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:00,880] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:00,880] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:00,880] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:00,880] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:00,882] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:00,884] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:00,888] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:00,888] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:00,888] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:00,890] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:00,921] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:00,921] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:00,921] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:00,921] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:00,923] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:02,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:02,949] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:04,963] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:04,976] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:04,981] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:04,981] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:04,981] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:04,981] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:05,043] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:05,043] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:05,048] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:05,056] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:05,056] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:05,056] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:05,056] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:05,088] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:05,089] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:05,089] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:05,089] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:05,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:07,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:07,090] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:07,092] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:07,092] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:07,092] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:07,092] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:07,092] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:07,092] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:07,092] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:07,092] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:07,094] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:07,094] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:07,094] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:07,094] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:07,094] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:07,106] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:42:09,128] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:09,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:09,128] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:09,137] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:09,144] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:09,144] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:09,144] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:09,144] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:09,187] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:09,189] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:09,189] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:09,189] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:09,189] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:09,189] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:09,189] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:09,189] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:09,189] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:09,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:09,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:09,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:09,193] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:09,193] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:09,193] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:09,193] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:09,193] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:09,199] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:09,199] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:09,199] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:09,199] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:09,226] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:11,240] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:11,242] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:11,242] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:11,242] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:11,242] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:11,242] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:11,242] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:11,242] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:11,244] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:11,244] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:11,244] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:11,244] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:11,244] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:11,244] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:11,244] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:11,274] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:13,301] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:13,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:13,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:13,308] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:13,308] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:13,308] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:13,308] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:13,308] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:13,395] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:13,403] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:13,403] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:13,403] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:13,403] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:13,434] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:13,436] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:13,436] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:13,436] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:13,436] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:13,437] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:15,418] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:15,450] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:17,474] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:17,480] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:17,480] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:17,480] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:17,480] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:17,480] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:17,480] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:17,480] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:17,480] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:17,571] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:17,571] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:17,573] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:17,575] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:17,575] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:17,575] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:17,575] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:17,577] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:17,577] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:17,581] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:17,581] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:17,583] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:17,583] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:17,610] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:17,618] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:17,618] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:17,618] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:19,620] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:19,656] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:42:21,675] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:21,675] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:21,675] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:21,675] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:21,677] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:21,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:21,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:21,679] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:21,683] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:21,685] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:21,685] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:21,685] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:21,744] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:21,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:21,753] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:21,754] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:21,762] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:21,762] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:21,762] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:21,762] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:21,789] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:23,790] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:42:23,790] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:42:23,790] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:42:23,790] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:42:23,792] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:42:23,794] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:42:23,794] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:42:23,827] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:42:25,842] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:42:25,844] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:42:25,844] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:42:25,844] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:42:25,844] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:42:25,844] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:42:25,844] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:42:25,844] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:42:25,846] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:42:25,852] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:42:25,852] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:42:25,852] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:42:25,854] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:48:44,058] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 22:48:44,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:48:44,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:48:44,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 22:48:44,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:48:44,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 22:48:44,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:48:44,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 22:48:44,067] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 22:48:44,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 22:48:44,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 22:48:44,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:48:44,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:48:44,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 22:48:44,113] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 22:48:44,233] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:48:44,233] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:48:44,245] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:48:44,247] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:48:55,975] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:48:56,068] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:55:59,144] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:56:18,689] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:56:18,704] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:56:18,704] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:56:18,704] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:56:18,704] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:56:18,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:56:20,990] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:56:21,028] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:56:22,514] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:56:22,514] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:56:22,530] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:56:22,530] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:56:22,530] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:56:22,530] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:56:22,536] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:56:22,536] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:56:22,536] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:56:22,536] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:56:49,983] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:56:49,993] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:56:49,993] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:56:49,993] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:56:49,995] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:56:50,018] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:56:52,008] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:56:52,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:56:52,013] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:56:52,013] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:56:52,013] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:56:52,013] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:56:52,013] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:56:52,035] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:56:54,073] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:56:54,073] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:56:54,073] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:56:54,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:56:54,080] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:56:54,085] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:56:54,085] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:56:54,085] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:56:54,148] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:56:54,149] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:56:54,156] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:56:54,156] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:56:54,156] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:56:54,156] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:56:54,199] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:56:56,190] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:56:56,226] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:56:58,245] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:56:58,245] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:56:58,247] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:56:58,255] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:56:58,255] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:56:58,255] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:56:58,336] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:56:58,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:56:58,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:56:58,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:56:58,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:56:58,336] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:56:58,340] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:56:58,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:56:58,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:56:58,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:56:58,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:56:58,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:56:58,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:56:58,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:56:58,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:56:58,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:56:58,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:56:58,350] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:56:58,350] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:56:58,351] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:56:58,351] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:56:58,380] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:56:58,380] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:56:58,381] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:00,390] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:00,413] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:57:02,423] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:02,423] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:02,423] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:02,423] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:02,425] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:02,432] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:02,432] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:02,432] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:02,432] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:02,495] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:02,504] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:02,504] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:02,531] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:02,535] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:04,503] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:04,534] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:57:06,522] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:06,522] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:06,522] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:06,531] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:06,538] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:06,539] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:06,539] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:06,539] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:06,603] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:06,605] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:06,613] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:06,613] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:06,613] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:06,615] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:06,639] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:06,639] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:06,639] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:06,639] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:06,639] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:06,639] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:06,639] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:06,639] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:06,647] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:06,647] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:06,647] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:06,648] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:06,648] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:06,648] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:06,648] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:08,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:08,695] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:57:10,727] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:10,727] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:10,727] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:10,727] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:10,727] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:10,730] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:10,733] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:10,733] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:10,733] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:10,733] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:10,794] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:10,794] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:10,794] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:10,796] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:10,796] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:10,796] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:10,796] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:10,797] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:10,797] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:10,798] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:10,798] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:10,798] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:10,798] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:10,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:10,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:10,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:10,799] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:10,805] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:10,805] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:10,805] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:10,805] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:10,829] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:12,833] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:12,865] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:57:14,862] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:14,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:14,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:14,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:14,886] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:14,886] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:14,887] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:14,887] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:14,962] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:14,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:14,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:14,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:14,962] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:14,974] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:14,974] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:14,974] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:14,974] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:14,974] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:14,974] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:14,977] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:14,977] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:14,977] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:14,977] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:14,978] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:14,978] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:14,983] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:14,983] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:14,983] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:14,983] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:15,010] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:16,993] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:17,021] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:19,041] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:19,051] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:19,051] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:19,051] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:19,051] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:19,057] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:19,104] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:19,115] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:19,116] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:19,116] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:19,116] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:19,116] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:19,116] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:19,117] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:19,124] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:19,124] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:19,124] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:19,124] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:19,150] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:21,145] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:21,176] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:23,201] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:23,293] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:23,296] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:23,296] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:23,296] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:23,296] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:23,296] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:23,296] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:23,296] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:23,331] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:23,332] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:23,332] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:23,332] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:23,334] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:25,333] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:25,368] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:27,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:27,402] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:27,402] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:27,402] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:27,402] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:27,402] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:27,402] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:27,402] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:27,402] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:27,467] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:27,481] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:27,481] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:57:27,512] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:27,512] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:27,513] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:27,513] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:27,513] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:27,513] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:27,513] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:27,513] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:27,513] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:27,513] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:27,516] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:27,516] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:27,516] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:27,516] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:27,516] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 22:57:29,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 22:57:29,552] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 22:57:31,551] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:57:31,551] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:57:31,551] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:57:31,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:57:31,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:57:31,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:57:31,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:57:31,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:57:31,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:57:31,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:57:31,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:57:31,554] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:57:31,554] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:57:31,554] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:57:31,554] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:57:31,554] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:57:31,554] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:57:31,558] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:57:31,558] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:57:31,558] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:57:31,558] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 22:59:26,815] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 22:59:27,204] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 22:59:27,205] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 22:59:27,205] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 22:59:27,205] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 22:59:27,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 22:59:27,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 22:59:27,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 22:59:27,206] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 22:59:27,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 22:59:27,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 22:59:27,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 22:59:27,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 22:59:27,207] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 22:59:27,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 22:59:27,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 22:59:27,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 22:59:27,208] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 22:59:27,218] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 22:59:27,219] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 22:59:27,219] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 22:59:27,220] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:03:40,308] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 23:03:40,553] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:03:40,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:03:40,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:03:40,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:03:40,556] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:03:40,558] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:03:40,558] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:03:40,558] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:03:40,558] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:03:40,563] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:03:40,563] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:03:40,563] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:03:40,563] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:04:56,029] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 23:04:56,519] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:04:56,519] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:04:56,519] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:04:56,519] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:04:56,519] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:04:56,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:04:56,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:04:56,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:04:56,521] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:04:56,522] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:04:56,522] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:04:56,522] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:04:56,522] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:04:56,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:04:56,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:04:56,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:04:56,523] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:04:56,531] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:04:56,532] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:04:56,532] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:04:56,533] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:09:42,980] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:09:42,997] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:09:42,997] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:09:42,998] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:09:42,998] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:09:43,028] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:09:43,028] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:09:43,028] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:09:43,030] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:09:45,339] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:09:45,370] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 23:09:46,914] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 23:09:46,917] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:09:46,930] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:09:46,930] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:09:46,930] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:09:46,932] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:09:46,932] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:09:46,932] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:09:46,932] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:09:46,932] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:09:46,932] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:09:46,932] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:09:46,932] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:09:46,933] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:09:46,933] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:09:46,933] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:09:46,933] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:09:46,933] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:09:46,938] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:09:46,938] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:09:46,938] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:09:46,938] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:09:46,996] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:09:46,996] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:09:46,996] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:09:47,002] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:09:47,009] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:09:47,009] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:09:47,009] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:09:47,033] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:09:47,033] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:09:47,033] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:09:47,033] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:09:47,033] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:09:47,033] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:09:47,033] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:09:47,041] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:09:47,041] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:09:47,041] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:09:47,041] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:09:47,041] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:09:47,041] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:09:47,041] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:09:47,041] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:09:49,019] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:09:49,047] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:09:51,070] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:09:51,089] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:09:51,089] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:09:51,089] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:09:51,089] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:09:51,149] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:09:51,156] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:09:51,162] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:09:51,162] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:09:51,162] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:09:51,162] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:09:51,184] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:09:53,175] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:09:53,214] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 23:09:55,231] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:09:55,231] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:09:55,231] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:09:55,231] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:09:55,236] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:09:55,242] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:09:55,242] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:09:55,242] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:09:55,242] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:10:49,161] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:10:49,417] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:10:49,428] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:10:49,428] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:10:49,428] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:10:49,428] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:10:59,626] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:10:59,634] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:10:59,641] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:10:59,641] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:10:59,642] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:10:59,643] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:11:00,017] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 23:11:58,349] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:11:58,566] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:11:58,573] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:11:58,573] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:11:58,573] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:11:58,573] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:12:04,386] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:12:04,386] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:12:04,386] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:12:04,389] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:12:04,397] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:12:04,397] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:12:04,397] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:12:04,397] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:15:52,921] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:15:52,922] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:15:52,922] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:15:52,923] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:15:52,923] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:15:52,923] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:15:52,924] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:15:52,924] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:15:52,924] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:15:52,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:15:52,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:15:52,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:15:52,926] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:15:52,926] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:15:52,926] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:15:52,926] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:15:52,927] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:15:52,934] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:15:52,935] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:15:52,935] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:15:52,936] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:16:02,492] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:16:02,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:16:02,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:16:02,493] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:16:02,494] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:16:02,494] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:16:02,494] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:16:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:16:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:16:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:16:02,495] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:16:02,496] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:16:02,496] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:16:02,496] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:16:02,496] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:16:02,497] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:16:02,497] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:16:02,505] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:16:02,506] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:16:02,507] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:16:02,507] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:20:08,074] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:20:08,075] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:20:08,075] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:20:08,075] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:20:08,075] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:20:08,075] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:20:08,076] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:20:08,076] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:20:08,076] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:20:08,076] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:20:08,076] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:20:08,076] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:20:08,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:20:08,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:20:08,077] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:20:08,078] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:20:08,078] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:20:08,083] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:20:08,083] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:20:08,083] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:20:08,084] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:20:13,609] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:20:13,609] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:20:13,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:20:13,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:20:13,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:20:13,610] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:20:13,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:20:13,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:20:13,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:20:13,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:20:13,611] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:20:13,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:20:13,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:20:13,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:20:13,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:20:13,612] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:20:13,613] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:20:13,618] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:20:13,618] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:20:13,618] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:20:13,619] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:21:46,161] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:21:46,163] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:21:46,163] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:21:46,163] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:21:46,164] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:21:46,164] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:21:46,164] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:21:46,164] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:21:46,165] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:21:46,165] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:21:46,165] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:21:46,166] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:21:46,166] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:21:46,166] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:21:46,166] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:21:46,167] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:21:46,167] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:21:46,171] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:21:46,173] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:21:46,173] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:21:46,174] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:21:46,202] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:21:46,203] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:21:46,203] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:21:46,204] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:21:46,204] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:21:46,204] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:21:46,204] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:21:46,205] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:21:46,205] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:21:46,205] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:21:46,205] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:21:46,205] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:21:46,206] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:21:46,206] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:21:46,206] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:21:48,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:21:48,656] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:21:48,657] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:21:48,657] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:21:48,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:21:48,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:21:48,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:21:48,658] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:21:48,659] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:21:48,659] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:21:48,659] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:21:48,659] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:21:48,660] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:21:48,660] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:21:48,660] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:21:48,688] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=994 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 23:21:50,214] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:21:50,214] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:21:50,215] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:21:50,215] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:21:50,215] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:21:50,215] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:21:50,215] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:21:50,215] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:21:50,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:21:50,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:21:50,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:21:50,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:21:50,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:21:50,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:21:50,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:21:50,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:21:50,217] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:21:50,222] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:21:50,222] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:21:50,223] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:21:50,223] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:22:25,473] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 23:22:25,834] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:22:25,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:22:25,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:22:25,835] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:22:25,836] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:22:25,836] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:22:25,836] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:22:25,837] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:22:25,837] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:22:25,837] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:22:25,838] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:22:25,838] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:22:25,838] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:22:25,838] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:22:25,839] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:22:25,839] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:22:25,839] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:22:25,839] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:22:25,839] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:22:25,839] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:22:25,839] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:23:52,394] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 23:23:52,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:23:52,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:23:52,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 23:23:52,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:23:52,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 23:23:52,394] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:23:52,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 23:23:52,425] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 23:23:52,524] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:23:52,528] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=None dtype=None
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-15 23:24:01,442] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=src_latitude dtype=Float64
[2026-07-15 23:24:01,458] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=src_longitude dtype=Float64
[2026-07-15 23:24:01,506] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=5000 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'unique_dst_ips', 'unique_dst_ports', 'unique_ciphers']
[2026-07-15 23:24:12,133] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 23:24:12,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:24:12,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:24:12,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 23:24:12,134] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:24:12,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 23:24:12,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:24:12,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:24:12,135] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:24:12,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 23:24:12,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:24:12,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 23:24:12,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:24:12,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 23:24:12,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:24:12,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 23:24:12,136] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:24:12,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 23:24:12,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 23:24:12,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 23:24:12,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 23:24:12,138] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 23:24:12,139] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:24:12,139] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:24:12,139] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 23:24:12,165] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 23:26:45,729] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 23:26:45,729] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:26:45,729] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 23:26:45,736] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 23:26:45,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 23:26:45,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:26:45,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:26:45,741] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 23:26:45,777] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 23:26:56,449] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 23:26:56,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:26:56,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:26:56,453] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 23:26:56,455] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:26:56,455] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 23:26:56,455] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:26:56,455] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 23:26:56,455] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 23:26:56,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 23:26:56,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 23:26:56,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 23:26:56,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:26:56,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:26:56,456] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 23:26:56,488] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 23:26:56,939] WARNING django.request: Not Found: /favicon.ico
[2026-07-15 23:27:37,660] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:27:37,661] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:27:37,661] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:27:37,661] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:27:37,662] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:27:37,662] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:27:37,662] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:27:37,662] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:27:37,662] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:27:37,663] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:27:37,663] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:27:37,663] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:27:37,663] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:27:37,663] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:27:37,664] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:27:37,664] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:27:37,664] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:27:37,671] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:27:37,671] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:27:37,672] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:27:37,672] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:28:11,919] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-15 23:28:12,284] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 23:28:12,285] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:28:12,285] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:28:12,285] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 23:28:12,286] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:28:12,286] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 23:28:12,286] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:28:12,287] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:28:12,287] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:28:12,287] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 23:28:12,287] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:28:12,288] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 23:28:12,289] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:28:12,289] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 23:28:12,289] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:28:12,289] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 23:28:12,290] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:28:12,290] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 23:28:12,290] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 23:28:12,290] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 23:28:12,291] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 23:28:12,291] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 23:28:12,291] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:28:12,291] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:28:12,292] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 23:28:12,318] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 23:28:15,919] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 23:28:15,920] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:28:15,920] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:28:15,920] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 23:28:15,920] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:28:15,921] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 23:28:15,921] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:28:15,921] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:28:15,921] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:28:15,922] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 23:28:15,922] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:28:15,922] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 23:28:15,922] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:28:15,923] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 23:28:15,923] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:28:15,923] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 23:28:15,923] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:28:15,924] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 23:28:15,924] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 23:28:15,924] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 23:28:15,924] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 23:28:15,924] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 23:28:15,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:28:15,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:28:15,925] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 23:28:15,948] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 23:28:16,023] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-15 23:28:16,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=allow_reconnect dtype=String
[2026-07-15 23:28:16,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:28:16,024] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:28:16,025] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:28:16,025] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:28:16,025] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:28:16,025] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:28:16,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:28:16,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:28:16,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=reconnect dtype=String
[2026-07-15 23:28:16,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:28:16,026] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:28:16,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=String
[2026-07-15 23:28:16,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=String
[2026-07-15 23:28:16,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:28:16,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:28:16,035] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['reconnect', 'allow_reconnect']
[2026-07-15 23:28:16,035] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['src_latitude', 'src_longitude', 'dst_latitude', 'dst_longitude']
[2026-07-15 23:28:16,035] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['reconnect', 'allow_reconnect', 'timestamp']
[2026-07-15 23:28:16,035] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:30:55,916] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 23:30:55,951] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=cert_status dtype=String
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_city dtype=String
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_latitude dtype=Float64
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_longitude dtype=Float64
[2026-07-15 23:31:06,848] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_mac dtype=String
[2026-07-15 23:31:06,852] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-15 23:31:06,852] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_url dtype=String
[2026-07-15 23:31:06,852] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-15 23:31:06,852] INFO analysis.data_loader: [LOAD_SCHEMA] col=handshake_ok dtype=Boolean
[2026-07-15 23:31:06,852] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-15 23:31:06,852] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_city dtype=String
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_latitude dtype=Float64
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_longitude dtype=Float64
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_mac dtype=String
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_url dtype=String
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=timeout_ms dtype=Int64
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-15 23:31:06,854] INFO analysis.data_loader: [LOAD_SCHEMA] col=trusted dtype=Boolean
[2026-07-15 23:31:06,883] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['timestamp']
[2026-07-15 23:31:07,321] WARNING django.request: Not Found: /favicon.ico
[2026-07-16 13:13:25,447] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=2000
[2026-07-16 13:13:25,447] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-16 13:13:25,447] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-16 13:13:25,447] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-16 13:13:25,447] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-16 13:13:25,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-16 13:13:25,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-16 13:13:25,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-16 13:13:25,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-16 13:13:25,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-16 13:13:25,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-16 13:13:25,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-16 13:13:25,449] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-16 13:13:25,467] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-16 13:13:25,467] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-16 13:13:25,467] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-16 13:13:25,467] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 13:13:25,469] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-16 13:13:25,471] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-16 13:13:26,118] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-16 13:14:26,407] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=500
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=+ ERR dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=+ OK dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=+.city dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=+.ispn dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=+.latd dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=+.lond dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=+.orgn dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 13:14:26,409] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Float64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=Int64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 13:14:26,410] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=Int64
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=Int64
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe.named.curve dtype=String
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=Int64
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=Int64
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 13:14:26,412] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 13:14:26,420] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['+.latd', '+.lond']
[2026-07-16 13:14:26,420] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', 'time', 'timestamp', 'name', 'source-node', 'tabl', '0rnd', '+.ispn', '+.orgn', '+.city', '8dbd']
[2026-07-16 13:14:26,420] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 13:14:26,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=None dtype=None
[2026-07-16 13:14:26,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=None dtype=None
[2026-07-16 13:14:26,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=4dur dtype=Float64
[2026-07-16 13:14:26,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-16 13:14:26,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-16 13:14:26,446] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=0cph dtype=String
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=0ver dtype=String
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=snam dtype=Float64
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=+.latd dtype=Float64
[2026-07-16 13:14:26,448] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=+.lond dtype=Float64
[2026-07-16 13:14:26,974] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=500 cols=1 feature_cols=['avg_duration']
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=10000
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD_SCHEMA] col=+.latd dtype=String
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD_SCHEMA] col=+.lond dtype=String
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 13:16:53,548] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=mixed_type dtype=String
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=nullable_float dtype=Float64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=nullable_int dtype=Int64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=plus_prefix dtype=String
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-16 13:16:53,553] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 13:16:53,555] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 13:16:53,555] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-16 13:16:53,555] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 13:16:53,555] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-16 13:16:53,555] INFO analysis.data_loader: [LOAD_SCHEMA] col=status_flag dtype=String
[2026-07-16 13:16:53,555] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 13:16:53,555] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-16 13:16:53,598] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['status_flag']
[2026-07-16 13:16:53,609] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: ['+.latd', '+.lond', 'nullable_float']
[2026-07-16 13:16:53,610] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', 'time', 'name', 'source-node', 'mixed_type', 'status_flag']
[2026-07-16 13:16:53,610] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['cipher']
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-16 13:16:53,762] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-16 13:16:53,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-16 13:16:53,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=status_flag dtype=Float64
[2026-07-16 13:16:53,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=+.latd dtype=Float64
[2026-07-16 13:16:53,764] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=+.lond dtype=Float64
[2026-07-16 13:16:54,362] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=10000 cols=5 feature_cols=['total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev']
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=2000
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-16 13:26:21,091] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-16 13:26:21,111] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-16 13:26:21,111] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-16 13:26:21,111] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-16 13:26:21,111] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-16 13:26:21,111] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-16 13:26:21,111] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-16 13:26:21,111] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-16 13:26:21,113] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:26:21,113] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-16 13:26:21,113] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-16 13:26:21,113] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-16 13:26:21,113] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-16 13:26:21,113] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 13:26:21,113] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-16 13:26:21,113] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-16 13:26:21,679] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=8 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-16 13:26:46,779] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=1000
[2026-07-16 13:26:46,779] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 13:26:46,779] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 13:26:46,779] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Float64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=Int64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=Float64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=Float64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=Float64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=Float64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=Boolean
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=Boolean
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 13:26:46,780] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 13:26:46,793] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 13:26:46,793] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 13:26:46,832] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=None dtype=None
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=None dtype=None
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=4dur dtype=Float64
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher-suite dtype=String
[2026-07-16 13:26:46,834] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=0ver dtype=String
[2026-07-16 13:26:46,836] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=snam dtype=Float64
[2026-07-16 13:26:46,836] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 13:26:46,836] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 13:26:46,836] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 13:26:46,836] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 13:26:47,392] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=1000 cols=1 feature_cols=['avg_duration']
[2026-07-16 13:27:06,715] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-16 13:27:06,715] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-16 13:27:06,715] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-16 13:27:06,715] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-16 13:27:06,717] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-16 13:27:06,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-16 13:27:07,301] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips']
[2026-07-16 13:30:45,057] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=10000
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_rev dtype=Int64
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=bytes_sent dtype=Int64
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher dtype=String
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_ip dtype=String
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=dst_port dtype=Int64
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=duration dtype=Float64
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_rev dtype=Int64
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=packets_sent dtype=Int64
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=proto dtype=String
[2026-07-16 13:30:45,059] INFO analysis.data_loader: [LOAD_SCHEMA] col=sni dtype=String
[2026-07-16 13:30:45,061] INFO analysis.data_loader: [LOAD_SCHEMA] col=src_ip dtype=String
[2026-07-16 13:30:45,061] INFO analysis.data_loader: [LOAD_SCHEMA] col=tls_version dtype=String
[2026-07-16 13:30:45,116] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=bytes_sent dtype=Int64
[2026-07-16 13:30:45,116] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=bytes_rev dtype=Int64
[2026-07-16 13:30:45,116] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=duration dtype=Float64
[2026-07-16 13:30:45,116] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=packets_sent dtype=Int64
[2026-07-16 13:30:45,116] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=packets_rev dtype=Int64
[2026-07-16 13:30:45,116] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=dst_ip dtype=String
[2026-07-16 13:30:45,116] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=dst_port dtype=Int64
[2026-07-16 13:30:45,119] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:30:45,119] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher dtype=String
[2026-07-16 13:30:45,119] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=tls_version dtype=String
[2026-07-16 13:30:45,120] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=sni dtype=String
[2026-07-16 13:30:45,120] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=proto dtype=String
[2026-07-16 13:30:45,120] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 13:30:45,120] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=None dtype=None
[2026-07-16 13:30:45,120] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=None dtype=None
[2026-07-16 13:30:45,692] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=7 feature_cols=['flow_count', 'total_bytes_sent', 'total_bytes_rev', 'avg_duration', 'total_packets', 'total_packets_rev', 'unique_dst_ips']
[2026-07-16 13:40:23,062] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-16 13:40:23,062] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 13:40:23,062] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 13:40:23,062] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 13:40:23,062] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 13:40:23,062] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=Int64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=Float64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=Float64
[2026-07-16 13:40:23,064] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=Float64
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=Float64
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 13:40:23,066] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 13:40:23,101] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 13:40:23,101] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 13:40:23,246] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=None dtype=None
[2026-07-16 13:40:23,246] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=None dtype=None
[2026-07-16 13:40:23,246] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=4dur dtype=Float64
[2026-07-16 13:40:23,251] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-16 13:40:23,251] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-16 13:40:23,251] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 13:40:23,251] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 13:40:23,251] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:40:23,251] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher-suite dtype=String
[2026-07-16 13:40:23,252] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=0ver dtype=String
[2026-07-16 13:40:23,252] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=snam dtype=Float64
[2026-07-16 13:40:23,252] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 13:40:23,252] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 13:40:23,252] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 13:40:23,252] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 13:40:23,845] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=3 feature_cols=['flow_count', 'avg_duration', 'unique_dst_ports']
[2026-07-16 13:41:12,338] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=10000
[2026-07-16 13:41:12,338] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 13:41:12,338] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=Int64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=Float64
[2026-07-16 13:41:12,341] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=Float64
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=Float64
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=Float64
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 13:41:12,343] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 13:41:12,399] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 13:41:12,399] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=None dtype=None
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=None dtype=None
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=4dur dtype=Float64
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=None dtype=None
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher-suite dtype=String
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=0ver dtype=String
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=snam dtype=Float64
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 13:41:12,643] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 13:41:13,296] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=3 feature_cols=['flow_count', 'avg_duration', 'unique_dst_ports']
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=10000
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=Float64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=Float64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=Float64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=Float64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 18:52:37,396] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 18:52:37,459] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 18:52:37,459] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 18:52:37,711] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Int64
[2026-07-16 18:52:37,711] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=None dtype=None
[2026-07-16 18:52:37,711] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=4dur dtype=Float64
[2026-07-16 18:52:37,711] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Int64
[2026-07-16 18:52:37,711] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-16 18:52:37,711] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 18:52:37,711] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 18:52:37,711] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 18:52:37,713] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher-suite dtype=String
[2026-07-16 18:52:37,713] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=0ver dtype=String
[2026-07-16 18:52:37,713] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=snam dtype=Float64
[2026-07-16 18:52:37,713] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 18:52:37,713] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 18:52:37,713] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 18:52:37,713] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 18:52:38,429] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=50 cols=5 feature_cols=['flow_count', 'total_bytes_sent', 'avg_duration', 'total_packets', 'unique_dst_ports']
[2026-07-16 19:58:00,740] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=5000
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=String
[2026-07-16 19:58:00,742] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 19:58:00,744] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 19:58:00,746] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 19:58:00,748] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 19:58:00,748] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 19:58:00,748] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 19:58:00,748] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 19:58:00,748] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 19:58:00,776] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['cipher-suite']
[2026-07-16 19:58:00,776] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 19:58:00,778] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '4dur', '8ses', '2tmo', '4ksz', '8ack', '8ppk', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', '0rnt', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 19:58:00,778] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 19:58:00,905] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Float64
[2026-07-16 19:58:00,905] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_rev matched=None dtype=None
[2026-07-16 19:58:00,905] INFO analysis.entity_aggregator: [FIND_COL] keywords=duration matched=4dur dtype=Float64
[2026-07-16 19:58:00,905] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Float64
[2026-07-16 19:58:00,905] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets_rev matched=None dtype=None
[2026-07-16 19:58:00,905] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=String
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_net matched=None dtype=None
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=cipher matched=cipher-suite dtype=Float64
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=tls_version matched=0ver dtype=String
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=sni matched=snam dtype=Float64
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=String
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=tcp_flags matched=None dtype=None
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 19:58:00,907] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 19:58:01,484] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=337 cols=5 feature_cols=['flow_count', 'total_bytes_sent', 'avg_duration', 'total_packets', 'unique_dst_ports']
[2026-07-16 20:04:08,432] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=2000
[2026-07-16 20:04:08,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 20:04:08,432] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=String
[2026-07-16 20:04:08,436] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 20:04:08,440] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 20:04:08,451] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['cipher-suite']
[2026-07-16 20:04:08,455] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 20:04:08,455] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '4dur', '8ses', '2tmo', '4ksz', '8ack', '8ppk', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', '0rnt', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 20:04:08,455] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 20:04:08,457] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']
[2026-07-16 20:04:08,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Float64
[2026-07-16 20:04:08,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Float64
[2026-07-16 20:04:08,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 20:04:08,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=String
[2026-07-16 20:04:08,530] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=String
[2026-07-16 20:04:08,532] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 20:04:08,532] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=2000
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 20:04:36,200] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 20:04:36,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 20:04:36,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 20:04:36,216] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 20:04:36,216] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['cipher-suite']
[2026-07-16 20:04:36,216] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 20:04:36,216] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '4dur', '8ses', '2tmo', '4ksz', '8ack', '8ppk', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', '0rnt', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 20:04:36,216] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 20:04:36,232] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']
[2026-07-16 20:04:36,304] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Float64
[2026-07-16 20:04:36,304] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Float64
[2026-07-16 20:04:36,304] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 20:04:36,306] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=String
[2026-07-16 20:04:36,306] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=String
[2026-07-16 20:04:36,306] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 20:04:36,306] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 20:04:36,845] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=320 cols=5 feature_cols=['flow_count', 'total_bytes_sent', 'total_packets', 'unique_dst_ports', 'unique_protocols']
[2026-07-16 20:05:27,691] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=2000
[2026-07-16 20:05:27,691] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 20:05:27,691] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 20:05:27,691] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 20:05:27,693] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 20:05:27,695] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=String
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 20:05:27,697] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 20:05:27,711] INFO analysis.data_loader: [CLEAN] BOOL_ENUM columns normalised: ['cipher-suite']
[2026-07-16 20:05:27,713] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 20:05:27,713] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '4dur', '8ses', '2tmo', '4ksz', '8ack', '8ppk', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', '0rnt', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 20:05:27,713] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 20:05:27,715] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']
[2026-07-16 20:05:27,787] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Float64
[2026-07-16 20:05:27,787] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Float64
[2026-07-16 20:05:27,787] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 20:05:27,787] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=String
[2026-07-16 20:05:27,787] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=String
[2026-07-16 20:05:27,787] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 20:05:27,787] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 20:05:28,429] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=320 cols=5 feature_cols=['flow_count', 'total_bytes_sent', 'total_packets', 'unique_dst_ports', 'unique_protocols']
[2026-07-16 21:13:45,300] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=3547
[2026-07-16 21:13:45,300] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 21:13:45,300] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=Boolean
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=Boolean
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=label dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 21:13:45,304] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 21:13:45,330] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 21:13:45,331] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 21:13:45,331] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 21:13:45,332] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']
[2026-07-16 21:13:45,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Int64
[2026-07-16 21:13:45,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Int64
[2026-07-16 21:13:45,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 21:13:45,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 21:13:45,431] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 21:13:45,436] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 21:13:45,436] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 21:13:46,042] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=834 cols=5 feature_cols=['flow_count', 'total_bytes_sent', 'total_packets', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-16 21:15:28,025] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=3547
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 21:15:28,027] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 21:15:28,030] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=Boolean
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=Boolean
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=label dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 21:15:28,031] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 21:15:28,040] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 21:15:28,040] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 21:15:28,040] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 21:15:28,056] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']
[2026-07-16 21:15:28,152] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Int64
[2026-07-16 21:15:28,152] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Int64
[2026-07-16 21:15:28,152] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 21:15:28,152] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 21:15:28,152] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 21:15:28,156] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 21:15:28,156] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 21:15:28,740] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=834 cols=5 feature_cols=['flow_count', 'total_bytes_sent', 'total_packets', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=3547
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 21:23:26,524] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 21:23:26,537] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 21:23:26,540] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 21:23:26,540] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 21:23:26,540] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 21:23:26,540] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 21:23:26,540] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 21:23:26,540] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 21:23:26,540] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=Boolean
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=Boolean
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=label dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 21:23:26,542] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 21:23:26,569] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 21:23:26,569] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 21:23:26,569] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 21:23:26,585] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']
[2026-07-16 21:23:26,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Int64
[2026-07-16 21:23:26,749] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Int64
[2026-07-16 21:23:26,750] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 21:23:26,750] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 21:23:26,750] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 21:23:26,751] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 21:23:26,752] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 21:23:35,247] WARNING django.request: Not Found: /favicon.ico
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=3547
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=Boolean
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=Boolean
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=label dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 21:46:22,791] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 21:46:22,818] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 21:46:22,818] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 21:46:22,820] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 21:46:22,822] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']
[2026-07-16 21:46:22,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Int64
[2026-07-16 21:46:22,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Int64
[2026-07-16 21:46:22,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 21:46:22,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 21:46:22,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 21:46:22,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 21:46:22,922] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 21:46:23,545] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=834 cols=5 feature_cols=['flow_count', 'total_bytes_sent', 'total_packets', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-16 21:47:41,188] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=3547
[2026-07-16 21:47:41,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 21:47:41,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 21:47:41,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 21:47:41,191] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 21:47:41,192] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=Boolean
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=Boolean
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=label dtype=String
[2026-07-16 21:47:41,194] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 21:47:41,196] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 21:47:41,196] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 21:47:41,196] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 21:47:41,196] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 21:47:41,196] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 21:47:41,196] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 21:47:41,196] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 21:47:41,196] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 21:47:41,215] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 21:47:41,215] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 21:47:41,219] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 21:47:41,221] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']
[2026-07-16 21:47:41,318] INFO analysis.entity_aggregator: [FIND_COL] keywords=bytes_sent matched=8ack dtype=Int64
[2026-07-16 21:47:41,318] INFO analysis.entity_aggregator: [FIND_COL] keywords=packets matched=8ppk dtype=Int64
[2026-07-16 21:47:41,318] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_ip matched=:ips dtype=String
[2026-07-16 21:47:41,318] INFO analysis.entity_aggregator: [FIND_COL] keywords=dst_port matched=:prs dtype=Int64
[2026-07-16 21:47:41,318] INFO analysis.entity_aggregator: [FIND_COL] keywords=proto matched=1ipp dtype=Int64
[2026-07-16 21:47:41,320] INFO analysis.entity_aggregator: [FIND_COL] keywords=lat matched=:ips.latd dtype=Float64
[2026-07-16 21:47:41,320] INFO analysis.entity_aggregator: [FIND_COL] keywords=lon matched=:ips.lond dtype=Float64
[2026-07-16 21:47:41,388] INFO analysis.tool_registry: [CLUSTER_INPUT] rows=834 cols=5 feature_cols=['flow_count', 'total_bytes_sent', 'total_packets', 'unique_dst_ips', 'unique_dst_ports']
[2026-07-16 22:05:20,747] WARNING django.request: Not Found: /.well-known/appspecific/com.chrome.devtools.json
[2026-07-16 22:13:32,487] WARNING django.request: Not Found: /favicon.ico
[2026-07-16 22:13:51,530] INFO analysis.geoip: [GEOIP] loaded 32 ranges from C:\Users\25044\Desktop\Proj\天璇\data\geoip_data.txt (0 skipped)
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD] files=1 total_rows_est=3547
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=0cph dtype=String
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=0crv dtype=String
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnd dtype=String
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=0rnt dtype=Int64
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=0ver dtype=String
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=1ipp dtype=Int64
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=2tmo dtype=Float64
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dbn dtype=String
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=4dur dtype=Float64
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=4ksz dtype=Int64
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ack dtype=Int64
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=8dbd dtype=String
[2026-07-16 22:13:51,873] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ppk dtype=Int64
[2026-07-16 22:13:51,877] INFO analysis.data_loader: [LOAD_SCHEMA] col=8ses dtype=Float64
[2026-07-16 22:13:51,877] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd dtype=String
[2026-07-16 22:13:51,877] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.city dtype=String
[2026-07-16 22:13:51,877] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.ispn dtype=String
[2026-07-16 22:13:51,877] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.latd dtype=String
[2026-07-16 22:13:51,877] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.lond dtype=String
[2026-07-16 22:13:51,877] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ipd.orgn dtype=String
[2026-07-16 22:13:51,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips dtype=String
[2026-07-16 22:13:51,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.city dtype=String
[2026-07-16 22:13:51,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.ispn dtype=String
[2026-07-16 22:13:51,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.latd dtype=String
[2026-07-16 22:13:51,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.lond dtype=String
[2026-07-16 22:13:51,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=:ips.orgn dtype=String
[2026-07-16 22:13:51,878] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prd dtype=Int64
[2026-07-16 22:13:51,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=:prs dtype=Int64
[2026-07-16 22:13:51,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=cipher-suite dtype=String
[2026-07-16 22:13:51,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=client-ip dtype=String
[2026-07-16 22:13:51,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnam dtype=String
[2026-07-16 22:13:51,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=cnrs dtype=Boolean
[2026-07-16 22:13:51,879] INFO analysis.data_loader: [LOAD_SCHEMA] col=dcnt dtype=String
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=ecdhe-named-curve dtype=String
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=isrs dtype=Boolean
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=label dtype=String
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=name dtype=String
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=row dtype=Int64
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=scnt dtype=String
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=server-ip dtype=String
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=snam dtype=String
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=source-node dtype=String
[2026-07-16 22:13:51,881] INFO analysis.data_loader: [LOAD_SCHEMA] col=tabl dtype=String
[2026-07-16 22:13:51,883] INFO analysis.data_loader: [LOAD_SCHEMA] col=time dtype=String
[2026-07-16 22:13:51,883] INFO analysis.data_loader: [LOAD_SCHEMA] col=timestamp dtype=String
[2026-07-16 22:13:51,904] INFO analysis.data_loader: [CLEAN] LAT_LON columns normalised to Float64: [':ips.latd', ':ips.lond', ':ipd.latd', ':ipd.lond']
[2026-07-16 22:13:51,905] INFO analysis.data_loader: [CLEAN] Generic numeric coercion applied: ['snam', 'cnam', '8dbd', 'tabl', 'name', 'source-node', 'cipher-suite', 'ecdhe-named-curve', '0rnd', 'time', 'timestamp', ':ips.ispn', ':ipd.ispn', ':ips.orgn', ':ipd.orgn', ':ips.city', ':ipd.city']
[2026-07-16 22:13:51,906] INFO analysis.data_loader: [CLEAN] HEX columns added hex_pairs_count: ['0cph', '0crv']
[2026-07-16 22:13:51,908] INFO analysis.data_loader: [CLEAN] Value normalization columns added: ['0ver_norm', '0cph_norm', 'cipher_suite_norm', '0crv_norm', 'ecdhe_named_curve_norm', 'cnrs_norm', 'isrs_norm']