changed output to comply to opendpi/ndpi, changed flow callback to only update