json: somewhere along the way  IP/port pairs had gotten swapped in
http and ssh eve logs