Improved WhatsApp detection. (#1595)

Signed-off-by: lns <matzeton@googlemail.com>
author: Toni <matzeton@googlemail.com> 2022-06-14 20:06:48 +0200
committer: GitHub <noreply@github.com> 2022-06-14 20:06:48 +0200
commit: d1773cc8e364bcc4934c6f577259c1098950c2c0 (patch)
tree: d952b81d4ade1ff7a885cb7bcb343eb412c23818
parent: bdf54d725bb3e751b63af171e08203e3e434c587 (diff)
4 files changed, 188 insertions, 39 deletions
diff --git a/src/lib/protocols/whatsapp.c b/src/lib/protocols/whatsapp.c
index 412caf957..d85bab56d 100644
--- a/src/lib/protocols/whatsapp.c
+++ b/src/lib/protocols/whatsapp.c
@@ -23,42 +23,96 @@
 
 #include "ndpi_api.h"
 
+#define WA_SEQ(seq) { .sequence_size = NDPI_ARRAY_LENGTH(seq) - 1 /* '\0' */, \
+                      .sequence = seq }
+#define GET_SEQ_SIZE(id) (whatsapp_sequences[id].sequence_size)
+#define GET_SEQ(id) (whatsapp_sequences[id].sequence)
+
+struct whatsapp_sequence {
+  size_t const sequence_size;
+  char const * const sequence;
+};
+
+enum whatsapp_sequence_id {
+  WA_SEQ_NEW = 0,
+  WA_SEQ_OLD,
+  WA_SEQ_VERY_OLD,
+
+  WA_SEQ_COUNT
+};
+
+static const struct whatsapp_sequence whatsapp_sequences[WA_SEQ_COUNT] = {
+  WA_SEQ("\x45\x44\x00\x01\x00\x00\x04\x08"),
+  WA_SEQ("\x45\x44\x00\x01\x00\x00\x02\x08"),
+  WA_SEQ("\x57\x41\x01\x05")
+};
+
+static void ndpi_int_whatsapp_add_connection(struct ndpi_detection_module_struct * ndpi_struct,
+                                             struct ndpi_flow_struct * flow)
+{
+  NDPI_LOG_INFO(ndpi_struct, "found WhatsApp\n");
+  ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_WHATSAPP,
+                             NDPI_PROTOCOL_UNKNOWN, NDPI_CONFIDENCE_DPI);
+}
+
+static int ndpi_int_match_whatsapp_sequence(struct ndpi_detection_module_struct * ndpi_struct,
+                                            struct ndpi_flow_struct * flow,
+                                            enum whatsapp_sequence_id seq_id)
+{
+  struct ndpi_packet_struct const * const packet = &ndpi_struct->packet;
+
+  if (flow->l4.tcp.wa_matched_so_far < GET_SEQ_SIZE(seq_id))
+  {
+    size_t match_len = GET_SEQ_SIZE(seq_id) - flow->l4.tcp.wa_matched_so_far;
+    if (packet->payload_packet_len < match_len)
+    {
+      match_len = packet->payload_packet_len;
+    }
+
+    if (memcmp(packet->payload, &GET_SEQ(seq_id)[flow->l4.tcp.wa_matched_so_far],
+               match_len) == 0)
+    {
+      flow->l4.tcp.wa_matched_so_far += match_len;
+      if (flow->l4.tcp.wa_matched_so_far == GET_SEQ_SIZE(seq_id))
+      {
+        ndpi_int_whatsapp_add_connection(ndpi_struct, flow);
+      }
+      return 0;
+    }
+  }
+
+  return 1;
+}
+
 void ndpi_search_whatsapp(struct ndpi_detection_module_struct *ndpi_struct,
 			  struct ndpi_flow_struct *flow) {
   struct ndpi_packet_struct *packet = &ndpi_struct->packet;
-  static u_int8_t whatsapp_sequence[] = {
-    0x45, 0x44, 0x0, 0x01, 0x0, 0x0, 0x02, 0x08,
-    0x0, 0x57, 0x41, 0x02, 0x0, 0x0, 0x0
-  };
-  static u_int8_t whatsapp_old_sequence[] = {
-    0x57, 0x41, 0x01, 0x05
-  };
 
   NDPI_LOG_DBG(ndpi_struct, "search WhatsApp\n");
 
-  /* This is a very old sequence (2015?) but we still have it in our unit tests.
-     Try to detect it, without too much effort... */
-  if(flow->l4.tcp.wa_matched_so_far == 0 &&
-     packet->payload_packet_len > sizeof(whatsapp_old_sequence) &&
-     memcmp(packet->payload, whatsapp_old_sequence, sizeof(whatsapp_old_sequence)) == 0) {
-    NDPI_LOG_INFO(ndpi_struct, "found WhatsApp (old sequence)\n");
-    ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_WHATSAPP, NDPI_PROTOCOL_UNKNOWN, NDPI_CONFIDENCE_DPI);
+  if (flow->packet_counter > 3)
+  {
+    NDPI_EXCLUDE_PROTO(ndpi_struct, flow);
     return;
   }
 
-  if(flow->l4.tcp.wa_matched_so_far < sizeof(whatsapp_sequence)) {
-    size_t match_len = sizeof(whatsapp_sequence) - flow->l4.tcp.wa_matched_so_far;
-    if(packet->payload_packet_len < match_len)
-	    match_len = packet->payload_packet_len;
+  /*
+   * This is a very old sequence (2015?) but we still have it in our unit tests.
+   * Try to detect it, without too much effort...
+   */
+  if (flow->l4.tcp.wa_matched_so_far == 0 &&
+      packet->payload_packet_len > GET_SEQ_SIZE(WA_SEQ_VERY_OLD) &&
+      memcmp(packet->payload, GET_SEQ(WA_SEQ_VERY_OLD), GET_SEQ_SIZE(WA_SEQ_VERY_OLD)) == 0)
+  {
+    NDPI_LOG_INFO(ndpi_struct, "found WhatsApp (old sequence)\n");
+    ndpi_int_whatsapp_add_connection(ndpi_struct, flow);
+    return;
+  }
 
-    if(!memcmp(packet->payload, &whatsapp_sequence[flow->l4.tcp.wa_matched_so_far], match_len)) {
-      flow->l4.tcp.wa_matched_so_far += match_len;
-      if(flow->l4.tcp.wa_matched_so_far == sizeof(whatsapp_sequence)) {
-	NDPI_LOG_INFO(ndpi_struct, "found WhatsApp\n");
-	ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_WHATSAPP, NDPI_PROTOCOL_UNKNOWN, NDPI_CONFIDENCE_DPI);
-      }
-      return;
-    }
+  if (ndpi_int_match_whatsapp_sequence(ndpi_struct, flow, WA_SEQ_NEW) == 0 ||
+      ndpi_int_match_whatsapp_sequence(ndpi_struct, flow, WA_SEQ_OLD) == 0)
+  {
+    return;
   }
 
   NDPI_EXCLUDE_PROTO(ndpi_struct, flow);
@@ -66,13 +120,16 @@ void ndpi_search_whatsapp(struct ndpi_detection_module_struct *ndpi_struct,
 
 
 void init_whatsapp_dissector(struct ndpi_detection_module_struct *ndpi_struct,
-			     u_int32_t *id,
-			     NDPI_PROTOCOL_BITMASK *detection_bitmask) {
-  ndpi_set_bitmask_protocol_detection("WhatsApp", ndpi_struct, detection_bitmask, *id,
-				      NDPI_PROTOCOL_WHATSAPP,
-				      ndpi_search_whatsapp,
-				      NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITH_PAYLOAD_WITHOUT_RETRANSMISSION,
-				      SAVE_DETECTION_BITMASK_AS_UNKNOWN,
-				      ADD_TO_DETECTION_BITMASK);
+                             u_int32_t *id,
+                             NDPI_PROTOCOL_BITMASK *detection_bitmask)
+{
+  ndpi_set_bitmask_protocol_detection(
+    "WhatsApp", ndpi_struct, detection_bitmask, *id,
+    NDPI_PROTOCOL_WHATSAPP,
+    ndpi_search_whatsapp,
+    NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITH_PAYLOAD_WITHOUT_RETRANSMISSION,
+	SAVE_DETECTION_BITMASK_AS_UNKNOWN,
+	ADD_TO_DETECTION_BITMASK
+  );
   *id += 1;
 }
diff --git a/tests/pcap/whatsapp.pcap b/tests/pcap/whatsapp.pcap
new file mode 100644
index 000000000..4e0bb461c
--- /dev/null
+++ b/tests/pcap/whatsapp.pcap
diff --git a/tests/result/wa_voice.pcap.out b/tests/result/wa_voice.pcap.out
index 249ba940c..3ddf43708 100644
--- a/tests/result/wa_voice.pcap.out
+++ b/tests/result/wa_voice.pcap.out
@@ -1,11 +1,10 @@
-Guessed flow protos:	5
+Guessed flow protos:	4
 
-DPI Packets (TCP):	104	(17.33 pkts/flow)
+DPI Packets (TCP):	27	(4.50 pkts/flow)
 DPI Packets (UDP):	33	(1.57 pkts/flow)
 DPI Packets (other):	1	(1.00 pkts/flow)
 Confidence Unknown          : 1 (flows)
-Confidence Match by IP      : 1 (flows)
-Confidence DPI              : 26 (flows)
+Confidence DPI              : 27 (flows)
 
 Unknown	2	120	1
 MDNS	10	1188	2
@@ -27,7 +26,7 @@ JA3 Host Stats:
 
 
 	1	TCP 192.168.2.12:50504 <-> 157.240.20.52:443 [proto: 91.142/TLS.WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][41 pkts/3669 bytes <-> 44 pkts/43871 bytes][Goodput ratio: 27/93][0.41 sec][Hostname/SNI: pps.whatsapp.net][ALPN: h2;h2-16;h2-15;h2-14;spdy/3.1;spdy/3;http/1.1][TLS Supported Versions: TLSv1.3;TLSv1.2;TLSv1.1;TLSv1][bytes ratio: -0.846 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 9/8 129/77 24/19][Pkt Len c2s/s2c min/avg/max/stddev: 54/66 89/997 583/1454 85/624][TLSv1.3][JA3C: 7a7a639628f0fe5c7e057628a5bbec5a][JA3S: 475c9302dc42b2751db9edcac3b74891][Safari][Cipher: TLS_CHACHA20_POLY1305_SHA256][Plen Bins: 8,11,4,0,0,2,2,0,2,0,0,0,0,0,2,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,2,0,0,0,0,61,0,0,0,0]
-	2	TCP 192.168.2.12:49355 <-> 157.240.20.53:5222 [proto: 142/WhatsApp][Encrypted][Confidence: Match by IP][cat: Chat/9][132 pkts/14116 bytes <-> 131 pkts/24439 bytes][Goodput ratio: 38/65][54.73 sec][bytes ratio: -0.268 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 342/421 9349/9387 1279/1420][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 107/187 393/1454 62/283][PLAIN TEXT (fd.9LTIP9)][Plen Bins: 1,63,2,3,10,10,0,0,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0]
+	2	TCP 192.168.2.12:49355 <-> 157.240.20.53:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][132 pkts/14116 bytes <-> 131 pkts/24439 bytes][Goodput ratio: 38/65][54.73 sec][bytes ratio: -0.268 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 342/421 9349/9387 1279/1420][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 107/187 393/1454 62/283][PLAIN TEXT (fd.9LTIP9)][Plen Bins: 1,63,2,3,10,10,0,0,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0]
 	3	UDP 91.252.56.51:32704 <-> 192.168.2.12:56328 [proto: 78.45/STUN.WhatsAppCall][ClearText][Confidence: DPI][cat: VoIP/10][87 pkts/14598 bytes <-> 77 pkts/17336 bytes][Goodput ratio: 75/81][11.91 sec][bytes ratio: -0.086 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 136/121 921/265 137/64][Pkt Len c2s/s2c min/avg/max/stddev: 68/68 168/225 318/331 61/68][Risk: ** Known Proto on Non Std Port **][Risk Score: 50][PLAIN TEXT (KEXQD/)][Plen Bins: 6,4,7,27,16,4,11,12,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
 	4	TCP 192.168.2.12:50503 <-> 31.13.86.51:443 [proto: 91.242/TLS.WhatsAppFiles][Encrypted][Confidence: DPI][cat: Download/7][25 pkts/2993 bytes <-> 25 pkts/21759 bytes][Goodput ratio: 44/92][0.39 sec][Hostname/SNI: media-mxp1-1.cdn.whatsapp.net][ALPN: h2;h2-16;h2-15;h2-14;spdy/3.1;spdy/3;http/1.1][TLS Supported Versions: TLSv1.3;TLSv1.2;TLSv1.1;TLSv1][bytes ratio: -0.758 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 8/10 127/126 28/30][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 120/870 583/1454 124/639][TLSv1.3][JA3C: b92a79ed03c3ff5611abb2305370d3e3][JA3S: 475c9302dc42b2751db9edcac3b74891][Safari][Cipher: TLS_CHACHA20_POLY1305_SHA256][Plen Bins: 7,14,7,0,0,3,0,0,7,0,3,0,0,3,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,47,0,0,0,0]
 	5	TCP 192.168.2.12:49354 <-> 17.242.60.84:5223 [proto: 238/ApplePush][Encrypted][Confidence: DPI][cat: Cloud/13][14 pkts/6933 bytes <-> 10 pkts/1074 bytes][Goodput ratio: 87/39][54.11 sec][bytes ratio: 0.732 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 4462/757 43773/5113 12515/1779][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 495/107 1506/215 607/44][Plen Bins: 0,42,14,0,7,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,21,0,0]
diff --git a/tests/result/whatsapp.pcap.out b/tests/result/whatsapp.pcap.out
new file mode 100644
index 000000000..71dc1e814
--- /dev/null
+++ b/tests/result/whatsapp.pcap.out
@@ -0,0 +1,93 @@
+Guessed flow protos:	0
+
+DPI Packets (TCP):	344	(4.00 pkts/flow)
+Confidence DPI              : 86 (flows)
+
+WhatsApp	679	96293	86
+
+	1	TCP 192.168.2.100:49026 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/3049 bytes -> 0 pkts/0 bytes][Goodput ratio: 82/0][0.19 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 28/0 125/0 41/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 381/0 1315/0 539/0][Plen Bins: 60,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,0,0,0,0,0,0,0,0]
+	2	TCP 192.168.2.100:44804 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][9 pkts/2139 bytes -> 0 pkts/0 bytes][Goodput ratio: 72/0][0.33 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 42/0 131/0 41/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 238/0 1090/0 319/0][Plen Bins: 40,0,0,0,0,0,20,0,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	3	TCP 192.168.2.100:40108 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][9 pkts/1919 bytes -> 0 pkts/0 bytes][Goodput ratio: 69/0][0.28 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 35/0 224/0 72/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 213/0 1324/0 393/0][Plen Bins: 60,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,0,0,0,0,0,0,0,0]
+	4	TCP 192.168.2.100:41722 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1853 bytes -> 0 pkts/0 bytes][Goodput ratio: 71/0][0.45 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 65/0 230/0 81/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 232/0 1335/0 417/0][Plen Bins: 33,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,0,0,0,0,0,0,0,0]
+	5	TCP 192.168.2.100:37482 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.27 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 38/0 215/0 73/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	6	TCP 192.168.2.100:37582 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.19 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 27/0 147/0 50/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	7	TCP 192.168.2.100:39828 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.18 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 25/0 131/0 44/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	8	TCP 192.168.2.100:40990 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.19 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 27/0 142/0 48/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	9	TCP 192.168.2.100:41664 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.19 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 28/0 132/0 44/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	10	TCP 192.168.2.100:42622 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.25 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 36/0 207/0 71/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	11	TCP 192.168.2.100:42796 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.18 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 26/0 137/0 46/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	12	TCP 192.168.2.100:43152 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.19 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 28/0 145/0 49/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	13	TCP 192.168.2.100:45130 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.17 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 24/0 124/0 42/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][PLAIN TEXT (Di.4xn)][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	14	TCP 192.168.2.100:45470 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.22 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 31/0 141/0 47/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	15	TCP 192.168.2.100:45602 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.20 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 29/0 153/0 52/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	16	TCP 192.168.2.100:46042 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.19 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 27/0 142/0 48/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	17	TCP 192.168.2.100:46394 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.26 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 37/0 205/0 69/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	18	TCP 192.168.2.100:46468 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.20 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 29/0 156/0 53/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	19	TCP 192.168.2.100:46576 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][< 1 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 27/0 142/0 48/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	20	TCP 192.168.2.100:47284 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.20 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 28/0 144/0 48/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	21	TCP 192.168.2.100:47360 -> 179.60.195.33:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1809 bytes -> 0 pkts/0 bytes][Goodput ratio: 70/0][0.18 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 26/0 145/0 50/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 226/0 1324/0 415/0][PLAIN TEXT (lOepOF2)][Plen Bins: 75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0]
+	22	TCP 192.168.2.100:40224 -> 31.13.83.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1249 bytes -> 0 pkts/0 bytes][Goodput ratio: 57/0][0.53 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 76/0 315/0 101/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 156/0 493/0 156/0][Plen Bins: 50,0,0,0,0,0,0,0,25,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	23	TCP 192.168.2.100:49096 -> 31.13.93.54:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1161 bytes -> 0 pkts/0 bytes][Goodput ratio: 54/0][0.91 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 130/0 392/0 127/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 145/0 406/0 134/0][Plen Bins: 50,0,0,0,0,0,0,0,25,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	24	TCP 192.168.2.100:39334 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1152 bytes -> 0 pkts/0 bytes][Goodput ratio: 53/0][0.36 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 51/0 201/0 63/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 144/0 397/0 131/0][Plen Bins: 50,0,0,0,0,0,0,0,25,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	25	TCP 192.168.2.100:47738 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1142 bytes -> 0 pkts/0 bytes][Goodput ratio: 53/0][0.27 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 39/0 155/0 49/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 143/0 386/0 129/0][Plen Bins: 50,0,0,0,0,0,0,0,25,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	26	TCP 192.168.2.100:47590 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1124 bytes -> 0 pkts/0 bytes][Goodput ratio: 52/0][0.28 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 39/0 157/0 50/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 140/0 368/0 125/0][Plen Bins: 50,0,0,0,0,0,0,0,25,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	27	TCP 192.168.2.100:49610 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/1054 bytes -> 0 pkts/0 bytes][Goodput ratio: 49/0][0.56 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 80/0 205/0 77/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 132/0 344/0 110/0][Plen Bins: 50,0,0,0,0,0,0,25,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	28	TCP 192.168.2.100:47948 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][7 pkts/1033 bytes -> 0 pkts/0 bytes][Goodput ratio: 54/0][0.37 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 30/0 62/0 178/0 52/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 148/0 344/0 124/0][Plen Bins: 50,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	29	TCP 192.168.2.100:37404 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.58 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 83/0 210/0 78/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	30	TCP 192.168.2.100:40084 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.29 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 42/0 164/0 51/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	31	TCP 192.168.2.100:40204 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.64 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 92/0 205/0 74/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	32	TCP 192.168.2.100:40954 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.36 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 52/0 153/0 48/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	33	TCP 192.168.2.100:41288 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.73 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 104/0 190/0 81/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	34	TCP 192.168.2.100:43152 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.35 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 50/0 169/0 52/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	35	TCP 192.168.2.100:43206 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.37 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 53/0 168/0 52/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	36	TCP 192.168.2.100:43230 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.26 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 37/0 156/0 50/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	37	TCP 192.168.2.100:43954 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.53 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 76/0 160/0 62/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	38	TCP 192.168.2.100:43978 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.34 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 49/0 204/0 66/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	39	TCP 192.168.2.100:45850 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.34 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 2/0 48/0 189/0 60/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	40	TCP 192.168.2.100:47900 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.62 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 88/0 209/0 68/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	41	TCP 192.168.2.100:49428 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/870 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.38 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 54/0 186/0 61/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 109/0 356/0 94/0][Plen Bins: 50,25,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	42	TCP 192.168.2.100:45932 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/864 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.30 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 43/0 127/0 40/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 108/0 350/0 92/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	43	TCP 192.168.2.100:45290 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/859 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.36 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 51/0 175/0 52/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 345/0 91/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	44	TCP 192.168.2.100:45334 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/859 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.26 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 37/0 161/0 52/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 345/0 91/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	45	TCP 192.168.2.100:46732 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/859 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.33 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 47/0 163/0 51/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 345/0 91/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	46	TCP 192.168.2.100:46768 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/859 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.28 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 40/0 165/0 52/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 345/0 91/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	47	TCP 192.168.2.100:47086 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/859 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.35 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 50/0 156/0 49/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 345/0 91/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	48	TCP 192.168.2.100:47296 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/859 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.52 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 13/0 75/0 229/0 79/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 345/0 91/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	49	TCP 192.168.2.100:47634 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/859 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.27 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 39/0 157/0 50/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 345/0 91/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	50	TCP 192.168.2.100:40006 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/858 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.39 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 55/0 233/0 73/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 344/0 90/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	51	TCP 192.168.2.100:49238 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/858 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.56 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 81/0 370/0 123/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 344/0 90/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	52	TCP 192.168.2.100:47350 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/854 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][0.60 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 85/0 300/0 109/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 356/0 94/0][Plen Bins: 50,0,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	53	TCP 192.168.2.100:32798 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.38 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 54/0 154/0 50/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	54	TCP 192.168.2.100:37674 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.54 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 77/0 275/0 92/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	55	TCP 192.168.2.100:42436 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.83 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 119/0 577/0 193/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	56	TCP 192.168.2.100:42646 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.28 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 40/0 148/0 45/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	57	TCP 192.168.2.100:45754 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.27 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 38/0 148/0 46/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	58	TCP 192.168.2.100:45824 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.25 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 36/0 144/0 46/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	59	TCP 192.168.2.100:46406 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.36 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 52/0 144/0 46/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	60	TCP 192.168.2.100:51724 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][< 1 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 44/0 165/0 51/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	61	TCP 192.168.2.100:52152 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.44 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 63/0 156/0 56/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	62	TCP 192.168.2.100:52294 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.26 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 37/0 143/0 45/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	63	TCP 192.168.2.100:58198 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.46 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 66/0 180/0 66/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	64	TCP 192.168.2.100:60328 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/853 bytes -> 0 pkts/0 bytes][Goodput ratio: 37/0][0.38 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 5/0 54/0 150/0 51/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 107/0 339/0 89/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	65	TCP 192.168.2.100:37378 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/845 bytes -> 0 pkts/0 bytes][Goodput ratio: 35/0][0.32 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 3/0 46/0 205/0 67/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 106/0 356/0 95/0][Plen Bins: 66,0,0,0,0,0,0,0,0,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	66	TCP 192.168.2.100:41214 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/845 bytes -> 0 pkts/0 bytes][Goodput ratio: 35/0][0.45 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 65/0 253/0 79/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 106/0 356/0 95/0][Plen Bins: 66,0,0,0,0,0,0,0,0,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	67	TCP 192.168.2.100:47776 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/843 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][0.55 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 79/0 487/0 167/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 105/0 345/0 91/0][Plen Bins: 50,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	68	TCP 192.168.2.100:49232 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/842 bytes -> 0 pkts/0 bytes][Goodput ratio: 33/0][0.44 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 63/0 367/0 125/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 105/0 344/0 90/0][Plen Bins: 50,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	69	TCP 192.168.2.100:38234 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/833 bytes -> 0 pkts/0 bytes][Goodput ratio: 36/0][0.58 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 83/0 202/0 75/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 345/0 91/0][Plen Bins: 75,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	70	TCP 192.168.2.100:41610 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/833 bytes -> 0 pkts/0 bytes][Goodput ratio: 36/0][0.44 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 62/0 151/0 53/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 345/0 91/0][Plen Bins: 75,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	71	TCP 192.168.2.100:48234 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/833 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][0.32 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 45/0 249/0 84/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 344/0 91/0][Plen Bins: 66,0,0,0,0,0,0,0,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	72	TCP 192.168.2.100:48538 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/833 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][0.42 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 60/0 331/0 111/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 344/0 91/0][Plen Bins: 66,0,0,0,0,0,0,0,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	73	TCP 192.168.2.100:49250 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/833 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][0.53 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 76/0 370/0 123/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 344/0 91/0][Plen Bins: 66,0,0,0,0,0,0,0,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	74	TCP 192.168.2.100:37766 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/830 bytes -> 0 pkts/0 bytes][Goodput ratio: 35/0][1.13 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 161/0 817/0 272/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 342/0 90/0][Plen Bins: 75,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	75	TCP 192.168.2.100:37822 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/830 bytes -> 0 pkts/0 bytes][Goodput ratio: 35/0][0.87 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 124/0 197/0 63/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 342/0 90/0][Plen Bins: 75,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	76	TCP 192.168.2.100:40178 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/830 bytes -> 0 pkts/0 bytes][Goodput ratio: 35/0][0.52 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 75/0 215/0 72/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 342/0 90/0][Plen Bins: 75,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	77	TCP 192.168.2.100:41808 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/830 bytes -> 0 pkts/0 bytes][Goodput ratio: 35/0][1.72 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1/0 245/0 1122/0 365/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 104/0 342/0 90/0][Plen Bins: 75,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	78	TCP 192.168.2.100:42272 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/816 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][0.49 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 70/0 211/0 72/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 102/0 328/0 86/0][Plen Bins: 75,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	79	TCP 192.168.2.100:51544 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/816 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][0.57 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 82/0 270/0 88/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 102/0 328/0 86/0][Plen Bins: 75,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	80	TCP 192.168.2.100:55476 -> 31.13.70.50:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][8 pkts/813 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][1.16 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 166/0 837/0 282/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 102/0 339/0 90/0][Plen Bins: 50,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	81	TCP 192.168.2.100:47810 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][7 pkts/793 bytes -> 0 pkts/0 bytes][Goodput ratio: 41/0][0.37 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 18/0 62/0 165/0 52/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 113/0 345/0 95/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	82	TCP 192.168.2.100:49182 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][7 pkts/792 bytes -> 0 pkts/0 bytes][Goodput ratio: 41/0][0.61 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 102/0 253/0 93/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 113/0 344/0 95/0][Plen Bins: 50,25,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	83	TCP 192.168.2.100:43084 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][7 pkts/776 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][0.80 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 134/0 615/0 220/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 111/0 356/0 100/0][Plen Bins: 50,0,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	84	TCP 192.168.2.100:46598 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][7 pkts/776 bytes -> 0 pkts/0 bytes][Goodput ratio: 38/0][< 1 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 160/0 876/0 321/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/0 111/0 356/0 100/0][Plen Bins: 50,0,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	85	TCP 192.168.2.100:55038 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][5 pkts/615 bytes -> 0 pkts/0 bytes][Goodput ratio: 45/0][0.13 sec][Plen Bins: 50,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	86	TCP 192.168.2.100:58882 -> 179.60.195.49:5222 [proto: 142/WhatsApp][Encrypted][Confidence: DPI][cat: Chat/9][5 pkts/615 bytes -> 0 pkts/0 bytes][Goodput ratio: 45/0][0.18 sec][PLAIN TEXT (RskAOI)][Plen Bins: 50,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
author	Toni <matzeton@googlemail.com>	2022-06-14 20:06:48 +0200
committer	GitHub <noreply@github.com>	2022-06-14 20:06:48 +0200
commit	d1773cc8e364bcc4934c6f577259c1098950c2c0 (patch)
tree	d952b81d4ade1ff7a885cb7bcb343eb412c23818
parent	bdf54d725bb3e751b63af171e08203e3e434c587 (diff)