diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2022-07-11 09:47:47 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-07-11 09:47:47 +0200 |
| commit | b4cb14ec1922b16a52c24324792f2bd7819f04a7 (patch) | |
| tree | b3b7d8f645c8d6c910f0b3c4f80bc3f891db452a | |
| parent | df599e5effaf1a76a89a014a1f488b27fa88cc52 (diff) | |
Keep track of how many dissectors calls we made for each flow (#1657)
357 files changed, 382 insertions, 7 deletions
diff --git a/example/ndpiReader.c b/example/ndpiReader.c index f8e55c484..de1c9325f 100644 --- a/example/ndpiReader.c +++ b/example/ndpiReader.c @@ -1398,6 +1398,12 @@ static void printFlow(u_int32_t id, struct ndpi_flow_info *flow, u_int16_t threa flow->detected_protocol) ? "Encrypted" : "ClearText"); fprintf(out, "[Confidence: %s]", ndpi_confidence_get_name(flow->confidence)); + /* If someone wants to have the num_dissector_calls variable per flow, he can print it here. + Disabled by default to avoid too many diffs in the unit tests... + */ +#if 0 + fprintf(out, "[Num calls: %d]", flow->num_dissector_calls); +#endif if(flow->detected_protocol.category != 0) fprintf(out, "[cat: %s/%u]", @@ -1977,6 +1983,7 @@ static void node_proto_guess_walker(const void *node, ndpi_VISIT which, int dept ndpi_thread_info[thread_id].workflow->stats.protocol_counter_bytes[proto] += flow->src2dst_bytes + flow->dst2src_bytes; ndpi_thread_info[thread_id].workflow->stats.protocol_flows[proto]++; ndpi_thread_info[thread_id].workflow->stats.flow_confidence[flow->confidence]++; + ndpi_thread_info[thread_id].workflow->stats.num_dissector_calls += flow->num_dissector_calls; } } @@ -3482,6 +3489,8 @@ static void printResults(u_int64_t processing_time_usec, u_int64_t setup_time_us for(i = 0; i < sizeof(cumulative_stats.flow_confidence)/sizeof(cumulative_stats.flow_confidence[0]); i++) cumulative_stats.flow_confidence[i] += ndpi_thread_info[thread_id].workflow->stats.flow_confidence[i]; + + cumulative_stats.num_dissector_calls += ndpi_thread_info[thread_id].workflow->stats.num_dissector_calls; } if(cumulative_stats.total_wire_bytes == 0) @@ -3589,6 +3598,11 @@ static void printResults(u_int64_t processing_time_usec, u_int64_t setup_time_us printf("\tConfidence: %-10s %-13llu (flows)\n", ndpi_confidence_get_name(i), (long long unsigned int)cumulative_stats.flow_confidence[i]); } + + if(cumulative_stats.ndpi_flow_count) + printf("\tNum dissector calls: %-13llu (%.2f diss/flow)\n", + (long long unsigned int)cumulative_stats.num_dissector_calls, + cumulative_stats.num_dissector_calls / (float)cumulative_stats.ndpi_flow_count); } if(results_file) { @@ -3615,6 +3629,11 @@ static void printResults(u_int64_t processing_time_usec, u_int64_t setup_time_us (long long unsigned int)cumulative_stats.flow_confidence[i]); } + if(cumulative_stats.ndpi_flow_count) + fprintf(results_file, "Num dissector calls: %llu (%.2f diss/flow)\n", + (long long unsigned int)cumulative_stats.num_dissector_calls, + cumulative_stats.num_dissector_calls / (float)cumulative_stats.ndpi_flow_count); + fprintf(results_file, "\n"); } diff --git a/example/reader_util.c b/example/reader_util.c index a81f87f6b..91eeb0775 100644 --- a/example/reader_util.c +++ b/example/reader_util.c @@ -1050,6 +1050,7 @@ void process_ndpi_collected_info(struct ndpi_workflow * workflow, struct ndpi_fl flow->risk_str = ndpi_strdup(s); flow->confidence = flow->ndpi_flow->confidence; + flow->num_dissector_calls = flow->ndpi_flow->num_dissector_calls; ndpi_snprintf(flow->host_server_name, sizeof(flow->host_server_name), "%s", flow->ndpi_flow->host_server_name); diff --git a/example/reader_util.h b/example/reader_util.h index c2a152d38..4f4ef68fe 100644 --- a/example/reader_util.h +++ b/example/reader_util.h @@ -203,6 +203,7 @@ typedef struct ndpi_flow_info { // result only, not used for flow identification ndpi_protocol detected_protocol; ndpi_confidence_t confidence; + u_int16_t num_dissector_calls; // Flow data analysis pkt_timeval src2dst_last_pkt_time, dst2src_last_pkt_time, flow_last_pkt_time; @@ -296,6 +297,7 @@ typedef struct ndpi_stats { u_int16_t max_packet_len; u_int64_t dpi_packet_count[3]; u_int64_t flow_confidence[NDPI_CONFIDENCE_MAX]; + u_int64_t num_dissector_calls; } ndpi_stats_t; diff --git a/src/include/ndpi_typedefs.h b/src/include/ndpi_typedefs.h index bfbcaddc4..c9718ddbc 100644 --- a/src/include/ndpi_typedefs.h +++ b/src/include/ndpi_typedefs.h @@ -1179,6 +1179,7 @@ struct ndpi_flow_struct { u_int16_t guessed_protocol_id, guessed_host_protocol_id, guessed_category, guessed_header_category; u_int8_t l4_proto, protocol_id_already_guessed:1, host_already_guessed:1, fail_with_unknown:1, init_finished:1, setup_packet_direction:1, packet_direction:1, check_extra_packets:1, is_ipv6:1; + u_int16_t num_dissector_calls; ndpi_confidence_t confidence; /* ndpi_confidence_t */ /* diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index e2076a158..004283169 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -5187,7 +5187,7 @@ static u_int32_t check_ndpi_detection_func(struct ndpi_detection_module_struct * { void *func = NULL; u_int8_t is_tcp_without_payload = (callback_buffer == ndpi_str->callback_buffer_tcp_no_payload); - u_int32_t num_calls = (is_tcp_without_payload != 0 ? 1 : 0); + u_int32_t num_calls = 0; u_int16_t proto_index = ndpi_str->proto_defaults[flow->guessed_protocol_id].protoIdx; u_int16_t proto_id = ndpi_str->proto_defaults[flow->guessed_protocol_id].protoId; NDPI_PROTOCOL_BITMASK detection_bitmask; @@ -6045,14 +6045,12 @@ static int ndpi_do_guess(struct ndpi_detection_module_struct *ndpi_str, struct n } if(flow->guessed_host_protocol_id >= NDPI_MAX_SUPPORTED_PROTOCOLS) { - //u_int32_t num_calls; NDPI_SELECTION_BITMASK_PROTOCOL_SIZE ndpi_selection_packet = {0}; /* This is a custom protocol and it has priority over everything else */ ret->master_protocol = flow->guessed_protocol_id, ret->app_protocol = flow->guessed_host_protocol_id; - //num_calls = - ndpi_check_flow_func(ndpi_str, flow, &ndpi_selection_packet); + flow->num_dissector_calls += ndpi_check_flow_func(ndpi_str, flow, &ndpi_selection_packet); //if(ndpi_str->ndpi_num_custom_protocols != 0) ndpi_fill_protocol_category(ndpi_str, flow, ret); @@ -6311,10 +6309,12 @@ ndpi_protocol ndpi_detection_process_packet(struct ndpi_detection_module_struct flow->tree_risk_checked = 1; } - ndpi_reconcile_protocols(ndpi_str, flow, &ret); - - if(num_calls == 0) + /* It is common to not trigger any dissectors for pure TCP ACK packets */ + if(num_calls == 0 && packet->payload_packet_len != 0) flow->fail_with_unknown = 1; + flow->num_dissector_calls += num_calls; + + ndpi_reconcile_protocols(ndpi_str, flow, &ret); /* Zoom cache */ if((ret.app_protocol == NDPI_PROTOCOL_ZOOM) diff --git a/tests/result/1kxun.pcap.out b/tests/result/1kxun.pcap.out index a8236d147..b59278927 100644 --- a/tests/result/1kxun.pcap.out +++ b/tests/result/1kxun.pcap.out @@ -6,6 +6,7 @@ Confidence Unknown : 14 (flows) Confidence Match by port : 5 (flows) Confidence Match by IP : 1 (flows) Confidence DPI : 177 (flows) +Num dissector calls: 5172 (26.25 diss/flow) Unknown 24 6428 14 DNS 2 378 1 diff --git a/tests/result/443-chrome.pcap.out b/tests/result/443-chrome.pcap.out index 77de3dcb8..d4e7d13c9 100644 --- a/tests/result/443-chrome.pcap.out +++ b/tests/result/443-chrome.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence Match by port : 1 (flows) +Num dissector calls: 121 (121.00 diss/flow) TLS 1 1506 1 diff --git a/tests/result/443-curl.pcap.out b/tests/result/443-curl.pcap.out index 4cca340b5..db264640d 100644 --- a/tests/result/443-curl.pcap.out +++ b/tests/result/443-curl.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) ntop 109 73982 1 diff --git a/tests/result/443-firefox.pcap.out b/tests/result/443-firefox.pcap.out index 2e8d7ae58..dc8d2c6d2 100644 --- a/tests/result/443-firefox.pcap.out +++ b/tests/result/443-firefox.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) ntop 667 458067 1 diff --git a/tests/result/443-git.pcap.out b/tests/result/443-git.pcap.out index b3c242ff8..dc12d8fdd 100644 --- a/tests/result/443-git.pcap.out +++ b/tests/result/443-git.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) Github 70 37189 1 diff --git a/tests/result/443-opvn.pcap.out b/tests/result/443-opvn.pcap.out index 023b2edcc..2920e3b3d 100644 --- a/tests/result/443-opvn.pcap.out +++ b/tests/result/443-opvn.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 139 (139.00 diss/flow) OpenVPN 46 11573 1 diff --git a/tests/result/443-safari.pcap.out b/tests/result/443-safari.pcap.out index 754720c2d..de9f8520f 100644 --- a/tests/result/443-safari.pcap.out +++ b/tests/result/443-safari.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) ntop 41 19929 1 diff --git a/tests/result/4in4tunnel.pcap.out b/tests/result/4in4tunnel.pcap.out index 17ca64206..55db50eaf 100644 --- a/tests/result/4in4tunnel.pcap.out +++ b/tests/result/4in4tunnel.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 5 (5.00 pkts/flow) Confidence Unknown : 1 (flows) +Num dissector calls: 169 (169.00 diss/flow) Unknown 5 850 1 diff --git a/tests/result/4in6tunnel.pcap.out b/tests/result/4in6tunnel.pcap.out index 3eb8cdae3..8ec4f6314 100644 --- a/tests/result/4in6tunnel.pcap.out +++ b/tests/result/4in6tunnel.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 13 (13.00 diss/flow) Microsoft 4 2188 1 diff --git a/tests/result/6in4tunnel.pcap.out b/tests/result/6in4tunnel.pcap.out index 582b20023..83d0aa9c2 100644 --- a/tests/result/6in4tunnel.pcap.out +++ b/tests/result/6in4tunnel.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 27 (5.40 pkts/flow) DPI Packets (UDP): 4 (2.00 pkts/flow) DPI Packets (other): 3 (1.00 pkts/flow) Confidence DPI : 10 (flows) +Num dissector calls: 67 (6.70 diss/flow) HTTP 10 1792 1 IMAPS 4 516 2 diff --git a/tests/result/6in6tunnel.pcap.out b/tests/result/6in6tunnel.pcap.out index a4e64d2cd..527eb1113 100644 --- a/tests/result/6in6tunnel.pcap.out +++ b/tests/result/6in6tunnel.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence Unknown : 1 (flows) +Num dissector calls: 112 (112.00 diss/flow) Unknown 2 212 1 diff --git a/tests/result/BGP_Cisco_hdlc_slarp.pcap.out b/tests/result/BGP_Cisco_hdlc_slarp.pcap.out index 21502ab9f..2b2865dcc 100644 --- a/tests/result/BGP_Cisco_hdlc_slarp.pcap.out +++ b/tests/result/BGP_Cisco_hdlc_slarp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) BGP 14 969 1 diff --git a/tests/result/BGP_redist.pcap.out b/tests/result/BGP_redist.pcap.out index 2024cefaa..14057e169 100644 --- a/tests/result/BGP_redist.pcap.out +++ b/tests/result/BGP_redist.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) BGP 2 322 2 diff --git a/tests/result/EAQ.pcap.out b/tests/result/EAQ.pcap.out index cc98f74c5..c0e5c6932 100644 --- a/tests/result/EAQ.pcap.out +++ b/tests/result/EAQ.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (6.00 pkts/flow) DPI Packets (UDP): 116 (4.00 pkts/flow) Confidence DPI : 31 (flows) +Num dissector calls: 4108 (132.52 diss/flow) Google 23 11743 2 EAQ 174 10092 29 diff --git a/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out b/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out index 1b38e1e44..bc15c46fa 100644 --- a/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out +++ b/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 5 (1.00 pkts/flow) Confidence DPI : 5 (flows) +Num dissector calls: 7 (1.40 diss/flow) RTP 6995 1395012 1 SIP 92 52851 3 diff --git a/tests/result/IEC104.pcap.out b/tests/result/IEC104.pcap.out index b9f66ed6e..fac53756c 100644 --- a/tests/result/IEC104.pcap.out +++ b/tests/result/IEC104.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (2.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 16 (8.00 diss/flow) IEC60870 15 1431 2 diff --git a/tests/result/KakaoTalk_chat.pcap.out b/tests/result/KakaoTalk_chat.pcap.out index 0067335b9..6907d0b9b 100644 --- a/tests/result/KakaoTalk_chat.pcap.out +++ b/tests/result/KakaoTalk_chat.pcap.out @@ -6,6 +6,7 @@ DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by port : 4 (flows) Confidence Match by IP : 1 (flows) Confidence DPI : 33 (flows) +Num dissector calls: 949 (24.97 diss/flow) DNS 2 217 1 HTTP 1 56 1 diff --git a/tests/result/KakaoTalk_talk.pcap.out b/tests/result/KakaoTalk_talk.pcap.out index b56cb7b31..853c6b13b 100644 --- a/tests/result/KakaoTalk_talk.pcap.out +++ b/tests/result/KakaoTalk_talk.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 6 (1.20 pkts/flow) Confidence Match by port : 4 (flows) Confidence Match by IP : 5 (flows) Confidence DPI : 11 (flows) +Num dissector calls: 1027 (51.35 diss/flow) HTTP 5 280 1 QQ 15 1727 1 diff --git a/tests/result/NTPv2.pcap.out b/tests/result/NTPv2.pcap.out index 74727e9f5..ab663b14c 100644 --- a/tests/result/NTPv2.pcap.out +++ b/tests/result/NTPv2.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) NTP 1 410 1 diff --git a/tests/result/NTPv3.pcap.out b/tests/result/NTPv3.pcap.out index 3f0518d96..79ad7659b 100644 --- a/tests/result/NTPv3.pcap.out +++ b/tests/result/NTPv3.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) NTP 1 90 1 diff --git a/tests/result/NTPv4.pcap.out b/tests/result/NTPv4.pcap.out index b2e8e8b75..2b64f5d45 100644 --- a/tests/result/NTPv4.pcap.out +++ b/tests/result/NTPv4.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) NTP 1 90 1 diff --git a/tests/result/Oscar.pcap.out b/tests/result/Oscar.pcap.out index 39fad6460..654c69ba9 100644 --- a/tests/result/Oscar.pcap.out +++ b/tests/result/Oscar.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 71 (71.00 pkts/flow) Confidence Match by port : 1 (flows) +Num dissector calls: 367 (367.00 diss/flow) TLS 71 9386 1 diff --git a/tests/result/WebattackRCE.pcap.out b/tests/result/WebattackRCE.pcap.out index f83ae8837..d7d3b623b 100644 --- a/tests/result/WebattackRCE.pcap.out +++ b/tests/result/WebattackRCE.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 797 DPI Packets (TCP): 797 (1.00 pkts/flow) Confidence DPI : 797 (flows) +Num dissector calls: 11955 (15.00 diss/flow) HTTP 797 191003 797 diff --git a/tests/result/WebattackSQLinj.pcap.out b/tests/result/WebattackSQLinj.pcap.out index b022b4a0f..bde47e2d0 100644 --- a/tests/result/WebattackSQLinj.pcap.out +++ b/tests/result/WebattackSQLinj.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 54 (6.00 pkts/flow) Confidence DPI : 9 (flows) +Num dissector calls: 288 (32.00 diss/flow) HTTP 94 30008 9 diff --git a/tests/result/WebattackXSS.pcap.out b/tests/result/WebattackXSS.pcap.out index 7c30717f3..3120cddee 100644 --- a/tests/result/WebattackXSS.pcap.out +++ b/tests/result/WebattackXSS.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 639 DPI Packets (TCP): 3972 (6.01 pkts/flow) Confidence Match by port : 639 (flows) Confidence DPI : 22 (flows) +Num dissector calls: 21182 (32.05 diss/flow) HTTP 9374 4721148 661 diff --git a/tests/result/afp.pcap.out b/tests/result/afp.pcap.out index a7cb7c885..f689bc4d2 100644 --- a/tests/result/afp.pcap.out +++ b/tests/result/afp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) AFP 16 1218 1 diff --git a/tests/result/agora-sd-rtn.pcap.out b/tests/result/agora-sd-rtn.pcap.out index 572834ff4..e21ded56a 100644 --- a/tests/result/agora-sd-rtn.pcap.out +++ b/tests/result/agora-sd-rtn.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 26 (1.00 pkts/flow) Confidence DPI : 26 (flows) +Num dissector calls: 2444 (94.00 diss/flow) SD-RTN 403 112365 26 diff --git a/tests/result/ah.pcapng.out b/tests/result/ah.pcapng.out index 0f0302951..62edb9d97 100644 --- a/tests/result/ah.pcapng.out +++ b/tests/result/ah.pcapng.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) IPSec 6 1768 2 diff --git a/tests/result/aimini-http.pcap.out b/tests/result/aimini-http.pcap.out index 880aa842f..3129503e6 100644 --- a/tests/result/aimini-http.pcap.out +++ b/tests/result/aimini-http.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 36 (9.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 164 (41.00 diss/flow) Aimini 133 86722 4 diff --git a/tests/result/ajp.pcap.out b/tests/result/ajp.pcap.out index 5ae01e7f0..4513f7f40 100644 --- a/tests/result/ajp.pcap.out +++ b/tests/result/ajp.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 8 (4.00 pkts/flow) DPI Packets (other): 6 (3.00 pkts/flow) Confidence Unknown : 2 (flows) Confidence DPI : 2 (flows) +Num dissector calls: 36 (9.00 diss/flow) Unknown 6 2200 2 AJP 26 4446 2 diff --git a/tests/result/alexa-app.pcapng.out b/tests/result/alexa-app.pcapng.out index 19074272d..af520b480 100644 --- a/tests/result/alexa-app.pcapng.out +++ b/tests/result/alexa-app.pcapng.out @@ -6,6 +6,7 @@ DPI Packets (other): 6 (1.00 pkts/flow) Confidence Match by port : 5 (flows) Confidence Match by IP : 9 (flows) Confidence DPI : 146 (flows) +Num dissector calls: 2719 (16.99 diss/flow) DNS 4 400 2 DHCP 3 1056 2 diff --git a/tests/result/among_us.pcap.out b/tests/result/among_us.pcap.out index 5a78fed96..3c0c8e089 100644 --- a/tests/result/among_us.pcap.out +++ b/tests/result/among_us.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) AmongUs 1 57 1 diff --git a/tests/result/amqp.pcap.out b/tests/result/amqp.pcap.out index 0981a057c..a0013433f 100644 --- a/tests/result/amqp.pcap.out +++ b/tests/result/amqp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 9 (3.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 401 (133.67 diss/flow) AMQP 160 23514 3 diff --git a/tests/result/android.pcap.out b/tests/result/android.pcap.out index d8ded0a71..153931e68 100644 --- a/tests/result/android.pcap.out +++ b/tests/result/android.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 52 (1.68 pkts/flow) DPI Packets (other): 4 (1.00 pkts/flow) Confidence Match by IP : 3 (flows) Confidence DPI : 60 (flows) +Num dissector calls: 668 (10.60 diss/flow) DNS 4 390 2 MDNS 2 174 2 diff --git a/tests/result/anyconnect-vpn.pcap.out b/tests/result/anyconnect-vpn.pcap.out index 66febe650..3355c4780 100644 --- a/tests/result/anyconnect-vpn.pcap.out +++ b/tests/result/anyconnect-vpn.pcap.out @@ -7,6 +7,7 @@ Confidence Unknown : 2 (flows) Confidence Match by port : 5 (flows) Confidence Match by IP : 1 (flows) Confidence DPI : 61 (flows) +Num dissector calls: 1226 (17.77 diss/flow) Unknown 19 1054 2 DNS 32 3655 16 diff --git a/tests/result/anydesk-2.pcap.out b/tests/result/anydesk-2.pcap.out index e2a34ca28..3ff3683dc 100644 --- a/tests/result/anydesk-2.pcap.out +++ b/tests/result/anydesk-2.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 13 (6.50 pkts/flow) DPI Packets (UDP): 4 (2.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 42 (10.50 diss/flow) AnyDesk 2083 346113 4 diff --git a/tests/result/anydesk.pcap.out b/tests/result/anydesk.pcap.out index cad4f3dce..b1c0e3fa8 100644 --- a/tests/result/anydesk.pcap.out +++ b/tests/result/anydesk.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 21 (10.50 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 23 (11.50 diss/flow) AnyDesk 6963 2795460 2 diff --git a/tests/result/avast_securedns.pcapng.out b/tests/result/avast_securedns.pcapng.out index 8456d3cd7..684c51ff4 100644 --- a/tests/result/avast_securedns.pcapng.out +++ b/tests/result/avast_securedns.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 39 (1.00 pkts/flow) Confidence DPI : 39 (flows) +Num dissector calls: 3549 (91.00 diss/flow) AVASTSecureDNS 77 11443 39 diff --git a/tests/result/bad-dns-traffic.pcap.out b/tests/result/bad-dns-traffic.pcap.out index c25282324..9cdc74bbe 100644 --- a/tests/result/bad-dns-traffic.pcap.out +++ b/tests/result/bad-dns-traffic.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 11 (3.67 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 3 (1.00 diss/flow) DNS 382 99374 3 diff --git a/tests/result/bitcoin.pcap.out b/tests/result/bitcoin.pcap.out index 26a3000b7..6dea4a7a8 100644 --- a/tests/result/bitcoin.pcap.out +++ b/tests/result/bitcoin.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (1.00 pkts/flow) Confidence DPI : 6 (flows) +Num dissector calls: 6 (1.00 diss/flow) Mining 637 581074 6 diff --git a/tests/result/bittorrent.pcap.out b/tests/result/bittorrent.pcap.out index fdea375a7..abf7a5b48 100644 --- a/tests/result/bittorrent.pcap.out +++ b/tests/result/bittorrent.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 24 (1.00 pkts/flow) Confidence DPI (cache) : 24 (flows) +Num dissector calls: 2114 (88.08 diss/flow) BitTorrent 299 305728 24 diff --git a/tests/result/bittorrent_utp.pcap.out b/tests/result/bittorrent_utp.pcap.out index 3ef6ad3bd..acdd48055 100644 --- a/tests/result/bittorrent_utp.pcap.out +++ b/tests/result/bittorrent_utp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (4.00 pkts/flow) Confidence DPI (cache) : 1 (flows) +Num dissector calls: 81 (81.00 diss/flow) BitTorrent 86 41489 1 diff --git a/tests/result/bjnp.pcap.out b/tests/result/bjnp.pcap.out index 59ec8d35c..3cd2791df 100644 --- a/tests/result/bjnp.pcap.out +++ b/tests/result/bjnp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 10 (1.00 pkts/flow) Confidence DPI : 10 (flows) +Num dissector calls: 10 (1.00 diss/flow) BJNP 10 460 10 diff --git a/tests/result/bot.pcap.out b/tests/result/bot.pcap.out index 9c4c8cc55..514f8d5be 100644 --- a/tests/result/bot.pcap.out +++ b/tests/result/bot.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) Azure 402 431124 1 diff --git a/tests/result/bt_search.pcap.out b/tests/result/bt_search.pcap.out index 1101a0caa..03f0ee56b 100644 --- a/tests/result/bt_search.pcap.out +++ b/tests/result/bt_search.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI (cache) : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) BitTorrent 2 322 1 diff --git a/tests/result/cachefly.pcapng.out b/tests/result/cachefly.pcapng.out index 107f767ed..5d921ba0d 100644 --- a/tests/result/cachefly.pcapng.out +++ b/tests/result/cachefly.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 8 (8.00 diss/flow) Cachefly 6 6163 1 diff --git a/tests/result/capwap.pcap.out b/tests/result/capwap.pcap.out index 4c08685c6..0463216a7 100644 --- a/tests/result/capwap.pcap.out +++ b/tests/result/capwap.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 6 (1.20 pkts/flow) DPI Packets (other): 4 (1.00 pkts/flow) Confidence DPI : 9 (flows) +Num dissector calls: 9 (1.00 diss/flow) DNS 2 166 1 DHCP 5 2090 1 diff --git a/tests/result/cassandra.pcap.out b/tests/result/cassandra.pcap.out index 76ad8af26..2627bb21c 100644 --- a/tests/result/cassandra.pcap.out +++ b/tests/result/cassandra.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (4.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 36 (18.00 diss/flow) Cassandra 286 126016 2 diff --git a/tests/result/check_mk_new.pcap.out b/tests/result/check_mk_new.pcap.out index c97276517..966551a9d 100644 --- a/tests/result/check_mk_new.pcap.out +++ b/tests/result/check_mk_new.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) CHECKMK 98 20242 1 diff --git a/tests/result/chrome.pcap.out b/tests/result/chrome.pcap.out index 10cfecbd0..e8e62e628 100644 --- a/tests/result/chrome.pcap.out +++ b/tests/result/chrome.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 36 (6.00 pkts/flow) Confidence DPI : 6 (flows) +Num dissector calls: 108 (18.00 diss/flow) TLS 5633 4985157 6 diff --git a/tests/result/citrix.pcap.out b/tests/result/citrix.pcap.out index 7eb8e08ff..5da530a5b 100644 --- a/tests/result/citrix.pcap.out +++ b/tests/result/citrix.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) Citrix 100 11332 1 diff --git a/tests/result/cloudflare-warp.pcap.out b/tests/result/cloudflare-warp.pcap.out index c3b171102..75fe88b77 100644 --- a/tests/result/cloudflare-warp.pcap.out +++ b/tests/result/cloudflare-warp.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 42 (5.25 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by IP : 3 (flows) Confidence DPI : 4 (flows) +Num dissector calls: 328 (41.00 diss/flow) Unknown 11 890 1 Google 8 476 3 diff --git a/tests/result/coap_mqtt.pcap.out b/tests/result/coap_mqtt.pcap.out index 7a9bd192b..4e8c0314c 100644 --- a/tests/result/coap_mqtt.pcap.out +++ b/tests/result/coap_mqtt.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (1.75 pkts/flow) DPI Packets (UDP): 12 (1.00 pkts/flow) Confidence DPI : 16 (flows) +Num dissector calls: 364 (22.75 diss/flow) COAP 19 1614 8 Dropbox 800 80676 4 diff --git a/tests/result/collectd.pcap.out b/tests/result/collectd.pcap.out index 586a62479..f0e526673 100644 --- a/tests/result/collectd.pcap.out +++ b/tests/result/collectd.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 3 DPI Packets (UDP): 13 (1.62 pkts/flow) Confidence Match by port : 3 (flows) Confidence DPI : 5 (flows) +Num dissector calls: 376 (47.00 diss/flow) collectd 81 109386 8 diff --git a/tests/result/corba.pcap.out b/tests/result/corba.pcap.out index 1acc23fbd..465bd8c38 100644 --- a/tests/result/corba.pcap.out +++ b/tests/result/corba.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (4.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 273 (91.00 diss/flow) Corba 22 3681 3 diff --git a/tests/result/cpha.pcap.out b/tests/result/cpha.pcap.out index 677b7aaaa..df64e8a07 100644 --- a/tests/result/cpha.pcap.out +++ b/tests/result/cpha.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) CPHA 1 96 1 diff --git a/tests/result/dazn.pcapng.out b/tests/result/dazn.pcapng.out index a1dcfd3f3..2cda8609b 100644 --- a/tests/result/dazn.pcapng.out +++ b/tests/result/dazn.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (4.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 39 (13.00 diss/flow) Dazn 12 6675 3 diff --git a/tests/result/dcerpc.pcap.out b/tests/result/dcerpc.pcap.out index 1e1ca4a4b..749ecf17e 100644 --- a/tests/result/dcerpc.pcap.out +++ b/tests/result/dcerpc.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (1.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 216 (54.00 diss/flow) RPC 16 6866 4 diff --git a/tests/result/dhcp-fuzz.pcapng.out b/tests/result/dhcp-fuzz.pcapng.out index 04b700f90..818d113fb 100644 --- a/tests/result/dhcp-fuzz.pcapng.out +++ b/tests/result/dhcp-fuzz.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence Match by port : 1 (flows) +Num dissector calls: 99 (99.00 diss/flow) DHCP 1 342 1 diff --git a/tests/result/diameter.pcap.out b/tests/result/diameter.pcap.out index 9bf57f443..b83b6cf83 100644 --- a/tests/result/diameter.pcap.out +++ b/tests/result/diameter.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Diameter 6 1980 1 diff --git a/tests/result/discord.pcap.out b/tests/result/discord.pcap.out index ac8241386..b371ad7ce 100644 --- a/tests/result/discord.pcap.out +++ b/tests/result/discord.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 5 (5.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 13 (13.00 diss/flow) Discord 7 3708 1 diff --git a/tests/result/dlt_ppp.pcap.out b/tests/result/dlt_ppp.pcap.out index 288a73bfe..ca94ec252 100644 --- a/tests/result/dlt_ppp.pcap.out +++ b/tests/result/dlt_ppp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) QUIC 1 1230 1 diff --git a/tests/result/dnp3.pcap.out b/tests/result/dnp3.pcap.out index e77d6ea67..7c33c704a 100644 --- a/tests/result/dnp3.pcap.out +++ b/tests/result/dnp3.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 80 (10.00 pkts/flow) Confidence DPI : 8 (flows) +Num dissector calls: 408 (51.00 diss/flow) DNP3 543 38754 8 diff --git a/tests/result/dns-invalid-chars.pcap.out b/tests/result/dns-invalid-chars.pcap.out index 23adec052..c6e9656c4 100644 --- a/tests/result/dns-invalid-chars.pcap.out +++ b/tests/result/dns-invalid-chars.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) DNS 2 196 1 diff --git a/tests/result/dns-tunnel-iodine.pcap.out b/tests/result/dns-tunnel-iodine.pcap.out index 8ae48ada7..216d4ff6b 100644 --- a/tests/result/dns-tunnel-iodine.pcap.out +++ b/tests/result/dns-tunnel-iodine.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) DNS 434 70252 1 diff --git a/tests/result/dns_ambiguous_names.pcap.out b/tests/result/dns_ambiguous_names.pcap.out index 4ff9b3a18..da95c56bd 100644 --- a/tests/result/dns_ambiguous_names.pcap.out +++ b/tests/result/dns_ambiguous_names.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 20 (2.00 pkts/flow) Confidence DPI : 10 (flows) +Num dissector calls: 10 (1.00 diss/flow) QQ 2 212 1 Google 2 208 1 diff --git a/tests/result/dns_doh.pcap.out b/tests/result/dns_doh.pcap.out index bed7a604b..f8a59533c 100644 --- a/tests/result/dns_doh.pcap.out +++ b/tests/result/dns_doh.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) DoH_DoT 142 20362 1 diff --git a/tests/result/dns_dot.pcap.out b/tests/result/dns_dot.pcap.out index 4a5508135..9033ba782 100644 --- a/tests/result/dns_dot.pcap.out +++ b/tests/result/dns_dot.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 20 (20.00 diss/flow) DoH_DoT 24 5869 1 diff --git a/tests/result/dns_exfiltration.pcap.out b/tests/result/dns_exfiltration.pcap.out index 4527f1a36..2bd023865 100644 --- a/tests/result/dns_exfiltration.pcap.out +++ b/tests/result/dns_exfiltration.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) DNS 300 73545 1 diff --git a/tests/result/dns_fragmented.pcap.out b/tests/result/dns_fragmented.pcap.out index 8601082b1..b0e344079 100644 --- a/tests/result/dns_fragmented.pcap.out +++ b/tests/result/dns_fragmented.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 12 (6.00 pkts/flow) DPI Packets (UDP): 39 (2.05 pkts/flow) Confidence DPI : 21 (flows) +Num dissector calls: 51 (2.43 diss/flow) DNS 53 16888 18 Google 6 4807 3 diff --git a/tests/result/dns_invert_query.pcapng.out b/tests/result/dns_invert_query.pcapng.out index 930b552d3..11c1a2931 100644 --- a/tests/result/dns_invert_query.pcapng.out +++ b/tests/result/dns_invert_query.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) DNS 2 134 1 diff --git a/tests/result/dns_long_domainname.pcap.out b/tests/result/dns_long_domainname.pcap.out index 6f7bdb85f..adbbf5283 100644 --- a/tests/result/dns_long_domainname.pcap.out +++ b/tests/result/dns_long_domainname.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Google 2 262 1 diff --git a/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out b/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out index 49dced2c5..607c28e88 100644 --- a/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out +++ b/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 256 (1.04 pkts/flow) Confidence DPI : 245 (flows) +Num dissector calls: 21885 (89.33 diss/flow) DNScrypt 488 309562 245 diff --git a/tests/result/dnscrypt-v2-doh.pcap.out b/tests/result/dnscrypt-v2-doh.pcap.out index 6e4ac575c..b17c10948 100644 --- a/tests/result/dnscrypt-v2-doh.pcap.out +++ b/tests/result/dnscrypt-v2-doh.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 70 (2.06 pkts/flow) Confidence DPI : 34 (flows) +Num dissector calls: 40 (1.18 diss/flow) DoH_DoT 577 216583 34 diff --git a/tests/result/dnscrypt-v2.pcap.out b/tests/result/dnscrypt-v2.pcap.out index a19080c97..d18f7784b 100644 --- a/tests/result/dnscrypt-v2.pcap.out +++ b/tests/result/dnscrypt-v2.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 6 (2.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 351 (117.00 diss/flow) DNScrypt 6 4300 3 diff --git a/tests/result/dnscrypt_skype_false_positive.pcapng.out b/tests/result/dnscrypt_skype_false_positive.pcapng.out index dd7f44696..394f29792 100644 --- a/tests/result/dnscrypt_skype_false_positive.pcapng.out +++ b/tests/result/dnscrypt_skype_false_positive.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 118 (118.00 diss/flow) DNScrypt 6 2380 1 diff --git a/tests/result/doq.pcapng.out b/tests/result/doq.pcapng.out index 48bf4e0ec..6f8e8e017 100644 --- a/tests/result/doq.pcapng.out +++ b/tests/result/doq.pcapng.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 65 (32.50 diss/flow) ICMPV6 6 1170 1 DoH_DoT 14 4788 1 diff --git a/tests/result/doq_adguard.pcapng.out b/tests/result/doq_adguard.pcapng.out index 9824ab7d1..7cb4d15ec 100644 --- a/tests/result/doq_adguard.pcapng.out +++ b/tests/result/doq_adguard.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 66 (66.00 diss/flow) DoH_DoT 296 44445 1 diff --git a/tests/result/dos_win98_smb_netbeui.pcap.out b/tests/result/dos_win98_smb_netbeui.pcap.out index fc908a2f2..80e5410f2 100644 --- a/tests/result/dos_win98_smb_netbeui.pcap.out +++ b/tests/result/dos_win98_smb_netbeui.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 3 (1.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 4 (1.00 diss/flow) NetBIOS 46 5060 2 SMBv1 15 3447 1 diff --git a/tests/result/drda_db2.pcap.out b/tests/result/drda_db2.pcap.out index 40ad36544..88cfbbf7e 100644 --- a/tests/result/drda_db2.pcap.out +++ b/tests/result/drda_db2.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 103 (103.00 diss/flow) DRDA 38 6691 1 diff --git a/tests/result/dropbox.pcap.out b/tests/result/dropbox.pcap.out index 99bf94f66..8f6619cc3 100644 --- a/tests/result/dropbox.pcap.out +++ b/tests/result/dropbox.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 27 (1.80 pkts/flow) Confidence DPI : 15 (flows) +Num dissector calls: 15 (1.00 diss/flow) Dropbox 848 90532 15 diff --git a/tests/result/dtls.pcap.out b/tests/result/dtls.pcap.out index a30ba6b9e..c4afb5e45 100644 --- a/tests/result/dtls.pcap.out +++ b/tests/result/dtls.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 2 (2.00 diss/flow) DTLS 2 394 1 diff --git a/tests/result/dtls2.pcap.out b/tests/result/dtls2.pcap.out index 713c12640..91a8a349a 100644 --- a/tests/result/dtls2.pcap.out +++ b/tests/result/dtls2.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 2 (2.00 diss/flow) DTLS 30 4991 1 diff --git a/tests/result/dtls_certificate.pcapng.out b/tests/result/dtls_certificate.pcapng.out index 126bd3d3d..a1f88ca5e 100644 --- a/tests/result/dtls_certificate.pcapng.out +++ b/tests/result/dtls_certificate.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 3 (3.00 diss/flow) WindowsUpdate 1 1486 1 diff --git a/tests/result/dtls_certificate_fragments.pcap.out b/tests/result/dtls_certificate_fragments.pcap.out index 54f792495..65b03183b 100644 --- a/tests/result/dtls_certificate_fragments.pcap.out +++ b/tests/result/dtls_certificate_fragments.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 2 (2.00 diss/flow) GoogleCloud 20 5978 1 diff --git a/tests/result/dtls_mid_sessions.pcapng.out b/tests/result/dtls_mid_sessions.pcapng.out index 2906cd226..0739c86d4 100644 --- a/tests/result/dtls_mid_sessions.pcapng.out +++ b/tests/result/dtls_mid_sessions.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (1.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 12 (3.00 diss/flow) DTLS 91 37868 4 diff --git a/tests/result/dtls_old_version.pcapng.out b/tests/result/dtls_old_version.pcapng.out index 0a0abed9b..6debea48d 100644 --- a/tests/result/dtls_old_version.pcapng.out +++ b/tests/result/dtls_old_version.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 3 (3.00 diss/flow) DTLS 7 994 1 diff --git a/tests/result/dtls_session_id_and_coockie_both.pcap.out b/tests/result/dtls_session_id_and_coockie_both.pcap.out index 8e395ae9e..e8fbf6761 100644 --- a/tests/result/dtls_session_id_and_coockie_both.pcap.out +++ b/tests/result/dtls_session_id_and_coockie_both.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 2 (2.00 diss/flow) DTLS 4 604 1 diff --git a/tests/result/emotet.pcap.out b/tests/result/emotet.pcap.out index 0b6261b30..44f8f3167 100644 --- a/tests/result/emotet.pcap.out +++ b/tests/result/emotet.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 48 (8.00 pkts/flow) Confidence DPI : 6 (flows) +Num dissector calls: 300 (50.00 diss/flow) SMTP 626 438465 1 HTTP 1601 1581542 3 diff --git a/tests/result/encrypted_sni.pcap.out b/tests/result/encrypted_sni.pcap.out index fb2c6b672..6738875b9 100644 --- a/tests/result/encrypted_sni.pcap.out +++ b/tests/result/encrypted_sni.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 3 DPI Packets (TCP): 3 (1.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 3 (1.00 diss/flow) Cloudflare 3 2310 3 diff --git a/tests/result/esp.pcapng.out b/tests/result/esp.pcapng.out index f846df506..12f82b09d 100644 --- a/tests/result/esp.pcapng.out +++ b/tests/result/esp.pcapng.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) IPSec 6 1856 2 diff --git a/tests/result/ethereum.pcap.out b/tests/result/ethereum.pcap.out index ce8b18bd5..0db358b57 100644 --- a/tests/result/ethereum.pcap.out +++ b/tests/result/ethereum.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 18 (1.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence Match by IP : 2 (flows) Confidence DPI : 71 (flows) +Num dissector calls: 1515 (20.47 diss/flow) Mining 1997 215877 72 AmazonAWS 1 78 1 diff --git a/tests/result/ethernetIP.pcap.out b/tests/result/ethernetIP.pcap.out index bd4589625..8c59c92a5 100644 --- a/tests/result/ethernetIP.pcap.out +++ b/tests/result/ethernetIP.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (1.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 4 (1.00 diss/flow) EthernetIP 100 17384 4 diff --git a/tests/result/exe_download.pcap.out b/tests/result/exe_download.pcap.out index 2a68abe6c..059e5720d 100644 --- a/tests/result/exe_download.pcap.out +++ b/tests/result/exe_download.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) HTTP 703 717463 1 diff --git a/tests/result/exe_download_as_png.pcap.out b/tests/result/exe_download_as_png.pcap.out index 0c22101af..5c474e5fc 100644 --- a/tests/result/exe_download_as_png.pcap.out +++ b/tests/result/exe_download_as_png.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) HTTP 534 529449 1 diff --git a/tests/result/facebook.pcap.out b/tests/result/facebook.pcap.out index 41c4be456..b364ecb13 100644 --- a/tests/result/facebook.pcap.out +++ b/tests/result/facebook.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 16 (8.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 36 (18.00 diss/flow) Facebook 60 30511 2 diff --git a/tests/result/firefox.pcap.out b/tests/result/firefox.pcap.out index cc7896f6b..1abaa0fed 100644 --- a/tests/result/firefox.pcap.out +++ b/tests/result/firefox.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 36 (6.00 pkts/flow) Confidence DPI : 6 (flows) +Num dissector calls: 108 (18.00 diss/flow) TLS 5441 4952732 6 diff --git a/tests/result/fix.pcap.out b/tests/result/fix.pcap.out index c74b476e9..917739cdf 100644 --- a/tests/result/fix.pcap.out +++ b/tests/result/fix.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (1.00 pkts/flow) Confidence DPI : 12 (flows) +Num dissector calls: 1092 (91.00 diss/flow) FIX 1261 115514 12 diff --git a/tests/result/fix2.pcap.out b/tests/result/fix2.pcap.out index 67965bdd1..63ec519f0 100644 --- a/tests/result/fix2.pcap.out +++ b/tests/result/fix2.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (4.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 212 (106.00 diss/flow) FIX 3046 246540 2 diff --git a/tests/result/forticlient.pcap.out b/tests/result/forticlient.pcap.out index a017cf38e..c2275d3b6 100644 --- a/tests/result/forticlient.pcap.out +++ b/tests/result/forticlient.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 35 (7.00 pkts/flow) Confidence DPI (cache) : 4 (flows) Confidence DPI : 1 (flows) +Num dissector calls: 100 (20.00 diss/flow) FortiClient 2000 430931 5 diff --git a/tests/result/ftp-start-tls.pcap.out b/tests/result/ftp-start-tls.pcap.out index a04ab94c1..7f2486b6f 100644 --- a/tests/result/ftp-start-tls.pcap.out +++ b/tests/result/ftp-start-tls.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (10.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 181 (181.00 diss/flow) FTP_CONTROL 51 7510 1 diff --git a/tests/result/ftp.pcap.out b/tests/result/ftp.pcap.out index 64bd23272..57cdff806 100644 --- a/tests/result/ftp.pcap.out +++ b/tests/result/ftp.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 97 (32.33 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 2 (flows) +Num dissector calls: 701 (233.67 diss/flow) Unknown 1115 1122198 1 FTP_CONTROL 68 5571 1 diff --git a/tests/result/ftp_failed.pcap.out b/tests/result/ftp_failed.pcap.out index fb5f71f76..8c52a2454 100644 --- a/tests/result/ftp_failed.pcap.out +++ b/tests/result/ftp_failed.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 166 (166.00 diss/flow) FTP_CONTROL 18 1700 1 diff --git a/tests/result/fuzz-2006-06-26-2594.pcap.out b/tests/result/fuzz-2006-06-26-2594.pcap.out index 73e990ebe..134c969f3 100644 --- a/tests/result/fuzz-2006-06-26-2594.pcap.out +++ b/tests/result/fuzz-2006-06-26-2594.pcap.out @@ -6,6 +6,7 @@ DPI Packets (other): 5 (1.00 pkts/flow) Confidence Unknown : 30 (flows) Confidence Match by port : 28 (flows) Confidence DPI : 193 (flows) +Num dissector calls: 5319 (21.19 diss/flow) Unknown 30 3356 30 FTP_CONTROL 36 2569 12 diff --git a/tests/result/fuzz-2006-09-29-28586.pcap.out b/tests/result/fuzz-2006-09-29-28586.pcap.out index 48464f930..7ee7eec2e 100644 --- a/tests/result/fuzz-2006-09-29-28586.pcap.out +++ b/tests/result/fuzz-2006-09-29-28586.pcap.out @@ -6,6 +6,7 @@ Confidence Unknown : 3 (flows) Confidence Match by port : 23 (flows) Confidence Match by IP : 2 (flows) Confidence DPI : 12 (flows) +Num dissector calls: 1274 (31.85 diss/flow) Unknown 3 655 3 HTTP 116 27378 35 diff --git a/tests/result/fuzz-2020-02-16-11740.pcap.out b/tests/result/fuzz-2020-02-16-11740.pcap.out index 868a31520..e9ed9e9cd 100644 --- a/tests/result/fuzz-2020-02-16-11740.pcap.out +++ b/tests/result/fuzz-2020-02-16-11740.pcap.out @@ -5,6 +5,7 @@ DPI Packets (other): 7 (1.00 pkts/flow) Confidence Unknown : 19 (flows) Confidence Match by port : 3 (flows) Confidence DPI : 55 (flows) +Num dissector calls: 1645 (21.36 diss/flow) Unknown 19 6603 19 VRRP 1 725 1 diff --git a/tests/result/fuzz-2021-10-13.pcap.out b/tests/result/fuzz-2021-10-13.pcap.out index 4cab569cb..1f22320cd 100644 --- a/tests/result/fuzz-2021-10-13.pcap.out +++ b/tests/result/fuzz-2021-10-13.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence Unknown : 1 (flows) +Num dissector calls: 119 (119.00 diss/flow) Unknown 1 197 1 diff --git a/tests/result/genshin-impact.pcap.out b/tests/result/genshin-impact.pcap.out index 4ac22e55e..e33e550b8 100644 --- a/tests/result/genshin-impact.pcap.out +++ b/tests/result/genshin-impact.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (4.00 pkts/flow) DPI Packets (UDP): 3 (1.00 pkts/flow) Confidence DPI : 6 (flows) +Num dissector calls: 565 (94.17 diss/flow) GenshinImpact 90 18405 6 diff --git a/tests/result/git.pcap.out b/tests/result/git.pcap.out index 17cad76ec..07187d19c 100644 --- a/tests/result/git.pcap.out +++ b/tests/result/git.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) Git 90 74005 1 diff --git a/tests/result/gnutella.pcap.out b/tests/result/gnutella.pcap.out index 7df83f9da..14e624d64 100644 --- a/tests/result/gnutella.pcap.out +++ b/tests/result/gnutella.pcap.out @@ -7,6 +7,7 @@ Confidence Unknown : 595 (flows) Confidence Match by port : 1 (flows) Confidence Match by IP : 1 (flows) Confidence DPI : 163 (flows) +Num dissector calls: 64871 (85.36 diss/flow) Unknown 1423 119577 595 MDNS 18 1632 2 diff --git a/tests/result/google_ssl.pcap.out b/tests/result/google_ssl.pcap.out index 6ef07c21b..0612f182c 100644 --- a/tests/result/google_ssl.pcap.out +++ b/tests/result/google_ssl.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 28 (28.00 pkts/flow) Confidence Match by IP : 1 (flows) +Num dissector calls: 268 (268.00 diss/flow) Google 28 9108 1 diff --git a/tests/result/googledns_android10.pcap.out b/tests/result/googledns_android10.pcap.out index fa6aaa9f0..9b0f6a433 100644 --- a/tests/result/googledns_android10.pcap.out +++ b/tests/result/googledns_android10.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 42 (6.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by IP : 2 (flows) Confidence DPI : 6 (flows) +Num dissector calls: 145 (18.12 diss/flow) ICMP 4 392 1 Google 8 504 2 diff --git a/tests/result/gquic.pcap.out b/tests/result/gquic.pcap.out index 4531a5cd9..1ebc065a6 100644 --- a/tests/result/gquic.pcap.out +++ b/tests/result/gquic.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Google 1 1392 1 diff --git a/tests/result/gre_no_options.pcapng.out b/tests/result/gre_no_options.pcapng.out index e2ebb9f76..539be3862 100644 --- a/tests/result/gre_no_options.pcapng.out +++ b/tests/result/gre_no_options.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) GRE 2 276 1 diff --git a/tests/result/gtp_c.pcap.out b/tests/result/gtp_c.pcap.out index f3cdb5b20..cd3cc519b 100644 --- a/tests/result/gtp_c.pcap.out +++ b/tests/result/gtp_c.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) GTP_C 4 684 1 diff --git a/tests/result/gtp_false_positive.pcapng.out b/tests/result/gtp_false_positive.pcapng.out index b04e95c1c..671adee97 100644 --- a/tests/result/gtp_false_positive.pcapng.out +++ b/tests/result/gtp_false_positive.pcapng.out @@ -3,6 +3,7 @@ Guessed flow protos: 3 DPI Packets (UDP): 7 (2.33 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) +Num dissector calls: 371 (123.67 diss/flow) Unknown 5 428 1 GTP 2 424 2 diff --git a/tests/result/gtp_prime.pcapng.out b/tests/result/gtp_prime.pcapng.out index 1794bf83a..ea8aec99f 100644 --- a/tests/result/gtp_prime.pcapng.out +++ b/tests/result/gtp_prime.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 52 (52.00 diss/flow) GTP_PRIME 1 300 1 diff --git a/tests/result/h323-overflow.pcap.out b/tests/result/h323-overflow.pcap.out index 48d430040..b48860db5 100644 --- a/tests/result/h323-overflow.pcap.out +++ b/tests/result/h323-overflow.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence Match by port : 1 (flows) +Num dissector calls: 121 (121.00 diss/flow) HTTP 1 58 1 diff --git a/tests/result/h323.pcap.out b/tests/result/h323.pcap.out index 8ab2d66c0..59e0551a3 100644 --- a/tests/result/h323.pcap.out +++ b/tests/result/h323.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 2 (2.00 pkts/flow) DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 123 (61.50 diss/flow) H323 12 1825 2 diff --git a/tests/result/hangout.pcap.out b/tests/result/hangout.pcap.out index fbdb7ba27..6f9b246fb 100644 --- a/tests/result/hangout.pcap.out +++ b/tests/result/hangout.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 74 (74.00 diss/flow) GoogleHangoutDuo 19 2774 1 diff --git a/tests/result/hpvirtgrp.pcap.out b/tests/result/hpvirtgrp.pcap.out index 23725fd98..de31113dd 100644 --- a/tests/result/hpvirtgrp.pcap.out +++ b/tests/result/hpvirtgrp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 37 (4.11 pkts/flow) Confidence DPI : 9 (flows) +Num dissector calls: 1143 (127.00 diss/flow) HP_VIRTGRP 135 12739 9 diff --git a/tests/result/hsrp0.pcap.out b/tests/result/hsrp0.pcap.out index 3ccfbe80f..49d0f723e 100644 --- a/tests/result/hsrp0.pcap.out +++ b/tests/result/hsrp0.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (1.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 4 (1.00 diss/flow) HSRP 4 264 4 diff --git a/tests/result/hsrp2.pcap.out b/tests/result/hsrp2.pcap.out index e97076175..c51f3428c 100644 --- a/tests/result/hsrp2.pcap.out +++ b/tests/result/hsrp2.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) HSRP 2 188 2 diff --git a/tests/result/hsrp2_ipv6.pcapng.out b/tests/result/hsrp2_ipv6.pcapng.out index 07ad371c2..7e278f00a 100644 --- a/tests/result/hsrp2_ipv6.pcapng.out +++ b/tests/result/hsrp2_ipv6.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 102 (51.00 diss/flow) HSRP 36 4374 2 diff --git a/tests/result/http-crash-content-disposition.pcap.out b/tests/result/http-crash-content-disposition.pcap.out index 443eee780..65edad719 100644 --- a/tests/result/http-crash-content-disposition.pcap.out +++ b/tests/result/http-crash-content-disposition.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) AmazonAWS 9 3328 1 diff --git a/tests/result/http-lines-split.pcap.out b/tests/result/http-lines-split.pcap.out index 7f11292f9..dcd4da415 100644 --- a/tests/result/http-lines-split.pcap.out +++ b/tests/result/http-lines-split.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) HTTP 14 2503 1 diff --git a/tests/result/http-manipulated.pcap.out b/tests/result/http-manipulated.pcap.out index eccbe2ed7..801cb5e50 100644 --- a/tests/result/http-manipulated.pcap.out +++ b/tests/result/http-manipulated.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (6.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 64 (32.00 diss/flow) HTTP 328 959347 2 diff --git a/tests/result/http_auth.pcap.out b/tests/result/http_auth.pcap.out index c51cd462d..a264630b2 100644 --- a/tests/result/http_auth.pcap.out +++ b/tests/result/http_auth.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) HTTP 33 20574 1 diff --git a/tests/result/http_connect.pcap.out b/tests/result/http_connect.pcap.out index 6116d2d5a..c1130c4b4 100644 --- a/tests/result/http_connect.pcap.out +++ b/tests/result/http_connect.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (5.00 pkts/flow) DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 37 (12.33 diss/flow) DNS 2 178 1 TLS 58 36496 1 diff --git a/tests/result/http_ipv6.pcap.out b/tests/result/http_ipv6.pcap.out index 261e9bb3d..e05b3ed55 100644 --- a/tests/result/http_ipv6.pcap.out +++ b/tests/result/http_ipv6.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 4 (2.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 6 (flows) Confidence DPI : 8 (flows) +Num dissector calls: 264 (17.60 diss/flow) Unknown 3 502 1 ntop 80 36401 4 diff --git a/tests/result/i3d.pcap.out b/tests/result/i3d.pcap.out index d266893d6..147805760 100644 --- a/tests/result/i3d.pcap.out +++ b/tests/result/i3d.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (1.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 392 (98.00 diss/flow) i3D 60 36502 4 diff --git a/tests/result/iax.pcap.out b/tests/result/iax.pcap.out index 1ba4fb02b..27e69b9f1 100644 --- a/tests/result/iax.pcap.out +++ b/tests/result/iax.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) IAX 50 9172 1 diff --git a/tests/result/icmp-tunnel.pcap.out b/tests/result/icmp-tunnel.pcap.out index f94cb5509..f17a4a1cf 100644 --- a/tests/result/icmp-tunnel.pcap.out +++ b/tests/result/icmp-tunnel.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) ICMP 863 190810 1 diff --git a/tests/result/iec60780-5-104.pcap.out b/tests/result/iec60780-5-104.pcap.out index ad4b72c32..d036befeb 100644 --- a/tests/result/iec60780-5-104.pcap.out +++ b/tests/result/iec60780-5-104.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 24 (4.00 pkts/flow) Confidence DPI : 6 (flows) +Num dissector calls: 108 (18.00 diss/flow) IEC60870 147 9033 6 diff --git a/tests/result/imap-starttls.pcap.out b/tests/result/imap-starttls.pcap.out index 90356405f..100f28744 100644 --- a/tests/result/imap-starttls.pcap.out +++ b/tests/result/imap-starttls.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (10.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 198 (198.00 diss/flow) IMAPS 32 7975 1 diff --git a/tests/result/imap.pcap.out b/tests/result/imap.pcap.out index 4c7aa3b5f..27bf7ba31 100644 --- a/tests/result/imap.pcap.out +++ b/tests/result/imap.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 11 (11.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 218 (218.00 diss/flow) IMAP 33 3774 1 diff --git a/tests/result/imaps.pcap.out b/tests/result/imaps.pcap.out index 2b7180e7c..989991de4 100644 --- a/tests/result/imaps.pcap.out +++ b/tests/result/imaps.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 20 (20.00 diss/flow) ntop 20 5196 1 diff --git a/tests/result/imo.pcap.out b/tests/result/imo.pcap.out index e576b94ae..45c7bafce 100644 --- a/tests/result/imo.pcap.out +++ b/tests/result/imo.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 7 (3.50 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 274 (137.00 diss/flow) IMO 100 35380 2 diff --git a/tests/result/instagram.pcap.out b/tests/result/instagram.pcap.out index 9d69eccc5..71c738e71 100644 --- a/tests/result/instagram.pcap.out +++ b/tests/result/instagram.pcap.out @@ -7,6 +7,7 @@ Confidence Unknown : 1 (flows) Confidence Match by port : 6 (flows) Confidence Match by IP : 1 (flows) Confidence DPI : 30 (flows) +Num dissector calls: 2166 (57.00 diss/flow) Unknown 1 66 1 HTTP 116 91784 6 diff --git a/tests/result/ip_fragmented_garbage.pcap.out b/tests/result/ip_fragmented_garbage.pcap.out index 7991f6674..89d658d60 100644 --- a/tests/result/ip_fragmented_garbage.pcap.out +++ b/tests/result/ip_fragmented_garbage.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 29 (29.00 pkts/flow) Confidence Unknown : 1 (flows) +Num dissector calls: 0 (0.00 diss/flow) Unknown 29 1566 1 diff --git a/tests/result/iphone.pcap.out b/tests/result/iphone.pcap.out index 15711b2db..754e51322 100644 --- a/tests/result/iphone.pcap.out +++ b/tests/result/iphone.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 55 (1.77 pkts/flow) DPI Packets (other): 5 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 50 (flows) +Num dissector calls: 608 (11.92 diss/flow) Unknown 2 120 1 MDNS 17 7012 5 diff --git a/tests/result/ipp.pcap.out b/tests/result/ipp.pcap.out index 56e114047..c82cecde4 100644 --- a/tests/result/ipp.pcap.out +++ b/tests/result/ipp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 21 (7.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 108 (36.00 diss/flow) IPP 277 248554 3 diff --git a/tests/result/ipsec_isakmp_esp.pcap.out b/tests/result/ipsec_isakmp_esp.pcap.out index f5d0085b9..22e583e46 100644 --- a/tests/result/ipsec_isakmp_esp.pcap.out +++ b/tests/result/ipsec_isakmp_esp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 24 (1.00 pkts/flow) Confidence DPI : 24 (flows) +Num dissector calls: 24 (1.00 diss/flow) IPSec 1080 580682 24 diff --git a/tests/result/ipv6_in_gtp.pcap.out b/tests/result/ipv6_in_gtp.pcap.out index 357f5138b..58c5e24c1 100644 --- a/tests/result/ipv6_in_gtp.pcap.out +++ b/tests/result/ipv6_in_gtp.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 4 (2.00 diss/flow) IPSec 1 166 1 RTP 1 150 1 diff --git a/tests/result/irc.pcap.out b/tests/result/irc.pcap.out index 95f6393cc..84fb273f1 100644 --- a/tests/result/irc.pcap.out +++ b/tests/result/irc.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 172 (172.00 diss/flow) IRC 29 8945 1 diff --git a/tests/result/ja3_lots_of_cipher_suites.pcap.out b/tests/result/ja3_lots_of_cipher_suites.pcap.out index 1f9518379..5cacdb0f3 100644 --- a/tests/result/ja3_lots_of_cipher_suites.pcap.out +++ b/tests/result/ja3_lots_of_cipher_suites.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) TLS 11 5132 1 diff --git a/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out b/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out index e6a71bb06..a09964eb1 100644 --- a/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out +++ b/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) TLS 27 6966 1 diff --git a/tests/result/jabber.pcap.out b/tests/result/jabber.pcap.out index 55e9613d7..a2b5d9f58 100644 --- a/tests/result/jabber.pcap.out +++ b/tests/result/jabber.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 142 (142.00 diss/flow) Jabber 13 901 1 diff --git a/tests/result/kerberos-error.pcap.out b/tests/result/kerberos-error.pcap.out index 79692fd81..b1271e7f8 100644 --- a/tests/result/kerberos-error.pcap.out +++ b/tests/result/kerberos-error.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Kerberos 2 481 1 diff --git a/tests/result/kerberos-login.pcap.out b/tests/result/kerberos-login.pcap.out index ebfb00d45..d305f3b2d 100644 --- a/tests/result/kerberos-login.pcap.out +++ b/tests/result/kerberos-login.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 11 (11.00 pkts/flow) DPI Packets (UDP): 12 (1.00 pkts/flow) Confidence DPI : 13 (flows) +Num dissector calls: 35 (2.69 diss/flow) Kerberos 39 37272 13 diff --git a/tests/result/kerberos.pcap.out b/tests/result/kerberos.pcap.out index af04f6d53..5ab16f635 100644 --- a/tests/result/kerberos.pcap.out +++ b/tests/result/kerberos.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 77 (2.14 pkts/flow) Confidence Unknown : 2 (flows) Confidence Match by port : 23 (flows) Confidence DPI : 11 (flows) +Num dissector calls: 3863 (107.31 diss/flow) Unknown 9 3031 2 SMBv23 6 1914 3 diff --git a/tests/result/kerberos_fuzz.pcapng.out b/tests/result/kerberos_fuzz.pcapng.out index 5b20c3456..0413a0e40 100644 --- a/tests/result/kerberos_fuzz.pcapng.out +++ b/tests/result/kerberos_fuzz.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Kerberos 1 288 1 diff --git a/tests/result/kontiki.pcap.out b/tests/result/kontiki.pcap.out index 142d38496..bfe2f9f69 100644 --- a/tests/result/kontiki.pcap.out +++ b/tests/result/kontiki.pcap.out @@ -4,6 +4,7 @@ DPI Packets (UDP): 6 (1.50 pkts/flow) DPI Packets (other): 4 (1.00 pkts/flow) Confidence Unknown : 2 (flows) Confidence DPI : 6 (flows) +Num dissector calls: 308 (38.50 diss/flow) Unknown 4 1696 2 Kontiki 3278 3852324 2 diff --git a/tests/result/lisp_registration.pcap.out b/tests/result/lisp_registration.pcap.out index da422b161..6fe6db23f 100644 --- a/tests/result/lisp_registration.pcap.out +++ b/tests/result/lisp_registration.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (4.00 pkts/flow) DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 232 (58.00 diss/flow) LISP 30 5266 4 diff --git a/tests/result/log4j-webapp-exploit.pcap.out b/tests/result/log4j-webapp-exploit.pcap.out index b69dd1fc6..817084f4a 100644 --- a/tests/result/log4j-webapp-exploit.pcap.out +++ b/tests/result/log4j-webapp-exploit.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 2 DPI Packets (TCP): 111 (15.86 pkts/flow) Confidence Unknown : 2 (flows) Confidence DPI : 5 (flows) +Num dissector calls: 569 (81.29 diss/flow) Unknown 356 25081 2 HTTP 34 6741 3 diff --git a/tests/result/long_tls_certificate.pcap.out b/tests/result/long_tls_certificate.pcap.out index bf983012a..c82ad1250 100644 --- a/tests/result/long_tls_certificate.pcap.out +++ b/tests/result/long_tls_certificate.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (12.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) Alibaba 47 14812 1 diff --git a/tests/result/malformed_dns.pcap.out b/tests/result/malformed_dns.pcap.out index 4b4c91430..f617b62eb 100644 --- a/tests/result/malformed_dns.pcap.out +++ b/tests/result/malformed_dns.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) DNS 6 5860 1 diff --git a/tests/result/malformed_icmp.pcap.out b/tests/result/malformed_icmp.pcap.out index 14849fea4..d3ff98991 100644 --- a/tests/result/malformed_icmp.pcap.out +++ b/tests/result/malformed_icmp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) ICMP 1 42 1 diff --git a/tests/result/malware.pcap.out b/tests/result/malware.pcap.out index 78c325097..a759a779c 100644 --- a/tests/result/malware.pcap.out +++ b/tests/result/malware.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 2 (2.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 4 (flows) +Num dissector calls: 42 (8.40 diss/flow) DNS 2 216 1 HTTP 1 66 1 diff --git a/tests/result/memcached.cap.out b/tests/result/memcached.cap.out index 172a1cf38..315c18e59 100644 --- a/tests/result/memcached.cap.out +++ b/tests/result/memcached.cap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 139 (139.00 diss/flow) Memcached 10 1711 1 diff --git a/tests/result/mgcp.pcapng.out b/tests/result/mgcp.pcapng.out index 4cdf5f702..a51e06521 100644 --- a/tests/result/mgcp.pcapng.out +++ b/tests/result/mgcp.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 19 (19.00 diss/flow) MGCP 12 1672 1 diff --git a/tests/result/modbus.pcap.out b/tests/result/modbus.pcap.out index e57c1f288..575d30e0e 100644 --- a/tests/result/modbus.pcap.out +++ b/tests/result/modbus.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Modbus 102 6681 1 diff --git a/tests/result/monero.pcap.out b/tests/result/monero.pcap.out index 6e26b5ba4..8f9a8a1e2 100644 --- a/tests/result/monero.pcap.out +++ b/tests/result/monero.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (4.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 94 (47.00 diss/flow) Mining 319 166676 2 diff --git a/tests/result/mongo_false_positive.pcapng.out b/tests/result/mongo_false_positive.pcapng.out index 00c221205..ef39b014a 100644 --- a/tests/result/mongo_false_positive.pcapng.out +++ b/tests/result/mongo_false_positive.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 26 (26.00 pkts/flow) Confidence Match by port : 1 (flows) +Num dissector calls: 431 (431.00 diss/flow) TLS 26 12163 1 diff --git a/tests/result/mongodb.pcap.out b/tests/result/mongodb.pcap.out index 39d76f182..41bb93a32 100644 --- a/tests/result/mongodb.pcap.out +++ b/tests/result/mongodb.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 27 (3.38 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) Confidence DPI : 5 (flows) +Num dissector calls: 239 (29.88 diss/flow) Unknown 3 230 1 MongoDB 24 2510 7 diff --git a/tests/result/mpeg-dash.pcap.out b/tests/result/mpeg-dash.pcap.out index b2bff9f92..9ccf2c17f 100644 --- a/tests/result/mpeg-dash.pcap.out +++ b/tests/result/mpeg-dash.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (2.50 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 93 (23.25 diss/flow) AmazonAWS 9 2693 3 MpegDash 4 1976 1 diff --git a/tests/result/mpeg.pcap.out b/tests/result/mpeg.pcap.out index 3d4dfdd45..966b42c6a 100644 --- a/tests/result/mpeg.pcap.out +++ b/tests/result/mpeg.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) ntop 19 10643 1 diff --git a/tests/result/mpegts.pcap.out b/tests/result/mpegts.pcap.out index 2c489c118..c9ce6b8f9 100644 --- a/tests/result/mpegts.pcap.out +++ b/tests/result/mpegts.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 69 (69.00 diss/flow) MPEG_TS 1 1362 1 diff --git a/tests/result/mqtt.pcap.out b/tests/result/mqtt.pcap.out index 909f2424c..2f7add490 100644 --- a/tests/result/mqtt.pcap.out +++ b/tests/result/mqtt.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 3 (1.50 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 9 (4.50 diss/flow) MQTT 9 1481 2 diff --git a/tests/result/mssql_tds.pcap.out b/tests/result/mssql_tds.pcap.out index b90c5686b..7afca8fa3 100644 --- a/tests/result/mssql_tds.pcap.out +++ b/tests/result/mssql_tds.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 18 (1.50 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 11 (flows) +Num dissector calls: 285 (23.75 diss/flow) MsSQL-TDS 38 16260 12 diff --git a/tests/result/mysql-8.pcap.out b/tests/result/mysql-8.pcap.out index 8c16de065..5210a832e 100644 --- a/tests/result/mysql-8.pcap.out +++ b/tests/result/mysql-8.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) MySQL 4 367 1 diff --git a/tests/result/nats.pcap.out b/tests/result/nats.pcap.out index e804a614e..cc329c0da 100644 --- a/tests/result/nats.pcap.out +++ b/tests/result/nats.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (5.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 64 (32.00 diss/flow) Nats 27 2460 2 diff --git a/tests/result/ndpi_match_string_subprotocol__error.pcapng.out b/tests/result/ndpi_match_string_subprotocol__error.pcapng.out index 423101c47..c68fc0818 100644 --- a/tests/result/ndpi_match_string_subprotocol__error.pcapng.out +++ b/tests/result/ndpi_match_string_subprotocol__error.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 3 (3.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 25 (25.00 diss/flow) SOAP 13 2935 1 diff --git a/tests/result/nest_log_sink.pcap.out b/tests/result/nest_log_sink.pcap.out index a69448d9c..92367ca22 100644 --- a/tests/result/nest_log_sink.pcap.out +++ b/tests/result/nest_log_sink.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 176 (13.54 pkts/flow) DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence Match by IP : 1 (flows) Confidence DPI : 13 (flows) +Num dissector calls: 2195 (156.79 diss/flow) DNS 15 1612 1 NestLogSink 676 112058 12 diff --git a/tests/result/netbios.pcap.out b/tests/result/netbios.pcap.out index e0e866deb..1d5a27846 100644 --- a/tests/result/netbios.pcap.out +++ b/tests/result/netbios.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 2 (2.00 pkts/flow) DPI Packets (UDP): 14 (1.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 14 (flows) +Num dissector calls: 137 (9.13 diss/flow) NetBIOS 258 24196 13 SMBv1 2 486 2 diff --git a/tests/result/netbios_wildcard_dns_query.pcap.out b/tests/result/netbios_wildcard_dns_query.pcap.out index 614795d64..f184850b4 100644 --- a/tests/result/netbios_wildcard_dns_query.pcap.out +++ b/tests/result/netbios_wildcard_dns_query.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) DNS 1 92 1 diff --git a/tests/result/netflix.pcap.out b/tests/result/netflix.pcap.out index d75de977a..394360cef 100644 --- a/tests/result/netflix.pcap.out +++ b/tests/result/netflix.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 27 (2.08 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by IP : 1 (flows) Confidence DPI : 60 (flows) +Num dissector calls: 1250 (20.49 diss/flow) DNS 4 386 2 SSDP 16 2648 1 diff --git a/tests/result/netflow-fritz.pcap.out b/tests/result/netflow-fritz.pcap.out index 6d223db90..64257c84e 100644 --- a/tests/result/netflow-fritz.pcap.out +++ b/tests/result/netflow-fritz.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) NetFlow 1 222 1 diff --git a/tests/result/netflowv9.pcap.out b/tests/result/netflowv9.pcap.out index bd6831f4d..d17ccbf87 100644 --- a/tests/result/netflowv9.pcap.out +++ b/tests/result/netflowv9.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 55 (55.00 diss/flow) NetFlow 10 13888 1 diff --git a/tests/result/nfsv2.pcap.out b/tests/result/nfsv2.pcap.out index ae0e317d9..d9908a814 100644 --- a/tests/result/nfsv2.pcap.out +++ b/tests/result/nfsv2.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 7 (1.00 pkts/flow) Confidence DPI : 7 (flows) +Num dissector calls: 162 (23.14 diss/flow) NFS 156 23144 7 diff --git a/tests/result/nfsv3.pcap.out b/tests/result/nfsv3.pcap.out index 87738f600..dd4afbe3d 100644 --- a/tests/result/nfsv3.pcap.out +++ b/tests/result/nfsv3.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 8 (1.00 pkts/flow) Confidence DPI : 8 (flows) +Num dissector calls: 194 (24.25 diss/flow) NFS 128 22816 8 diff --git a/tests/result/nintendo.pcap.out b/tests/result/nintendo.pcap.out index 457b3c2fd..573f5e82e 100644 --- a/tests/result/nintendo.pcap.out +++ b/tests/result/nintendo.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 35 (2.33 pkts/flow) DPI Packets (other): 2 (1.00 pkts/flow) Confidence Match by IP : 6 (flows) Confidence DPI : 15 (flows) +Num dissector calls: 1314 (62.57 diss/flow) ICMP 30 2100 2 Nintendo 890 320242 12 diff --git a/tests/result/nntp.pcap.out b/tests/result/nntp.pcap.out index 04631d212..32a122e87 100644 --- a/tests/result/nntp.pcap.out +++ b/tests/result/nntp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 145 (145.00 diss/flow) Usenet 32 7037 1 diff --git a/tests/result/no_sni.pcap.out b/tests/result/no_sni.pcap.out index f87448d1e..bf05e1f48 100644 --- a/tests/result/no_sni.pcap.out +++ b/tests/result/no_sni.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 51 (6.38 pkts/flow) Confidence DPI : 8 (flows) +Num dissector calls: 127 (15.88 diss/flow) DoH_DoT 268 31882 1 Cloudflare 917 562254 7 diff --git a/tests/result/ocs.pcap.out b/tests/result/ocs.pcap.out index 0294f8964..1a7c4e2a7 100644 --- a/tests/result/ocs.pcap.out +++ b/tests/result/ocs.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 92 (7.67 pkts/flow) DPI Packets (UDP): 8 (1.00 pkts/flow) Confidence Match by IP : 2 (flows) Confidence DPI : 18 (flows) +Num dissector calls: 222 (11.10 diss/flow) Google 29 3320 5 OCS 863 57552 7 diff --git a/tests/result/ocsp.pcapng.out b/tests/result/ocsp.pcapng.out index ad41d7d1e..4061abd12 100644 --- a/tests/result/ocsp.pcapng.out +++ b/tests/result/ocsp.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 60 (6.00 pkts/flow) Confidence DPI : 10 (flows) +Num dissector calls: 320 (32.00 diss/flow) HTTP 23 10871 1 OCSP 321 62776 9 diff --git a/tests/result/ookla.pcap.out b/tests/result/ookla.pcap.out index 3a4e142b1..477103dd9 100644 --- a/tests/result/ookla.pcap.out +++ b/tests/result/ookla.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 16 (8.00 pkts/flow) Confidence DPI (cache) : 1 (flows) Confidence DPI : 1 (flows) +Num dissector calls: 145 (72.50 diss/flow) Ookla 5086 4689745 2 diff --git a/tests/result/openvpn.pcap.out b/tests/result/openvpn.pcap.out index e39f1f66a..f3b34fc66 100644 --- a/tests/result/openvpn.pcap.out +++ b/tests/result/openvpn.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) DPI Packets (UDP): 5 (2.50 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 399 (133.00 diss/flow) OpenVPN 298 57111 3 diff --git a/tests/result/oracle12.pcapng.out b/tests/result/oracle12.pcapng.out index f0e0cb982..6038f6900 100644 --- a/tests/result/oracle12.pcapng.out +++ b/tests/result/oracle12.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 20 (20.00 pkts/flow) Confidence Match by port : 1 (flows) +Num dissector calls: 314 (314.00 diss/flow) Oracle 20 2518 1 diff --git a/tests/result/os_detected.pcapng.out b/tests/result/os_detected.pcapng.out index e2c585591..ea7382ec9 100644 --- a/tests/result/os_detected.pcapng.out +++ b/tests/result/os_detected.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Google 1 1294 1 diff --git a/tests/result/ospfv2_add_new_prefix.pcap.out b/tests/result/ospfv2_add_new_prefix.pcap.out index e6e85d408..af15dac8d 100644 --- a/tests/result/ospfv2_add_new_prefix.pcap.out +++ b/tests/result/ospfv2_add_new_prefix.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) OSPF 2 200 1 diff --git a/tests/result/pgm.pcap.out b/tests/result/pgm.pcap.out index 46e5d0ad7..249d84067 100644 --- a/tests/result/pgm.pcap.out +++ b/tests/result/pgm.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) PGM 1000 196302 1 diff --git a/tests/result/pgsql.pcap.out b/tests/result/pgsql.pcap.out index 04ca0825b..e78f56619 100644 --- a/tests/result/pgsql.pcap.out +++ b/tests/result/pgsql.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (6.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 278 (139.00 diss/flow) PostgreSQL 39 4709 2 diff --git a/tests/result/pim.pcap.out b/tests/result/pim.pcap.out index 66ad6f6d2..113d36b82 100644 --- a/tests/result/pim.pcap.out +++ b/tests/result/pim.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) IP_PIM 10 920 1 diff --git a/tests/result/pinterest.pcap.out b/tests/result/pinterest.pcap.out index 36eda919b..61cd55954 100644 --- a/tests/result/pinterest.pcap.out +++ b/tests/result/pinterest.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 16 DPI Packets (TCP): 224 (6.05 pkts/flow) Confidence Match by port : 16 (flows) Confidence DPI : 21 (flows) +Num dissector calls: 425 (11.49 diss/flow) TLS 979 1924858 20 Facebook 242 237988 2 diff --git a/tests/result/pluralsight.pcap.out b/tests/result/pluralsight.pcap.out index 4ab85fe39..19415d334 100644 --- a/tests/result/pluralsight.pcap.out +++ b/tests/result/pluralsight.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 33 (5.50 pkts/flow) Confidence DPI : 6 (flows) +Num dissector calls: 78 (13.00 diss/flow) Pluralsight 44 29652 6 diff --git a/tests/result/pop3.pcap.out b/tests/result/pop3.pcap.out index 7fa8ddf56..89f65c615 100644 --- a/tests/result/pop3.pcap.out +++ b/tests/result/pop3.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (10.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 196 (196.00 diss/flow) POP3 31 3915 1 diff --git a/tests/result/pops.pcapng.out b/tests/result/pops.pcapng.out index 0a2c9e68a..4407b2750 100644 --- a/tests/result/pops.pcapng.out +++ b/tests/result/pops.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 3 (3.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 15 (15.00 diss/flow) POPS 5 2998 1 diff --git a/tests/result/pps.pcap.out b/tests/result/pps.pcap.out index becb50fbb..4f3d7ceb6 100644 --- a/tests/result/pps.pcap.out +++ b/tests/result/pps.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 201 (4.57 pkts/flow) Confidence Unknown : 34 (flows) Confidence Match by port : 2 (flows) Confidence DPI : 71 (flows) +Num dissector calls: 6416 (59.96 diss/flow) Unknown 990 378832 34 HTTP 377 402676 46 diff --git a/tests/result/pptp.pcap.out b/tests/result/pptp.pcap.out index 7c9ffa71e..c65c847a3 100644 --- a/tests/result/pptp.pcap.out +++ b/tests/result/pptp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 66 (66.00 diss/flow) PPTP 24 2328 1 diff --git a/tests/result/psiphon3.pcap.out b/tests/result/psiphon3.pcap.out index ff5c7b968..afd80def8 100644 --- a/tests/result/psiphon3.pcap.out +++ b/tests/result/psiphon3.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (12.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 23 (23.00 diss/flow) Psiphon 62 11818 1 diff --git a/tests/result/punycode-idn.pcap.out b/tests/result/punycode-idn.pcap.out index d4a075265..86b2f11c4 100644 --- a/tests/result/punycode-idn.pcap.out +++ b/tests/result/punycode-idn.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 8 (8.00 pkts/flow) DPI Packets (UDP): 4 (2.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 34 (11.33 diss/flow) DNS 2 162 1 HTTP 12 1597 1 diff --git a/tests/result/quic-23.pcap.out b/tests/result/quic-23.pcap.out index 1e6e92114..35337fb06 100644 --- a/tests/result/quic-23.pcap.out +++ b/tests/result/quic-23.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) QUIC 20 7191 1 diff --git a/tests/result/quic-24.pcap.out b/tests/result/quic-24.pcap.out index cf366412a..92e9266d2 100644 --- a/tests/result/quic-24.pcap.out +++ b/tests/result/quic-24.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) QUIC 15 8000 1 diff --git a/tests/result/quic-27.pcap.out b/tests/result/quic-27.pcap.out index e42be1964..14c076b28 100644 --- a/tests/result/quic-27.pcap.out +++ b/tests/result/quic-27.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Google 20 12887 1 diff --git a/tests/result/quic-28.pcap.out b/tests/result/quic-28.pcap.out index 83263bb1c..28f2795aa 100644 --- a/tests/result/quic-28.pcap.out +++ b/tests/result/quic-28.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Cloudflare 253 246793 1 diff --git a/tests/result/quic-29.pcap.out b/tests/result/quic-29.pcap.out index 5c0afc783..f723554a2 100644 --- a/tests/result/quic-29.pcap.out +++ b/tests/result/quic-29.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) QUIC 15 9386 1 diff --git a/tests/result/quic-33.pcapng.out b/tests/result/quic-33.pcapng.out index 463e12942..fcce39eba 100644 --- a/tests/result/quic-33.pcapng.out +++ b/tests/result/quic-33.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 64 (64.00 diss/flow) QUIC 992 1340722 1 diff --git a/tests/result/quic-34.pcap.out b/tests/result/quic-34.pcap.out index fe5b0d9d0..ef057e06d 100644 --- a/tests/result/quic-34.pcap.out +++ b/tests/result/quic-34.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 66 (66.00 diss/flow) QUIC 4 4836 1 diff --git a/tests/result/quic-fuzz-overflow.pcapng.out b/tests/result/quic-fuzz-overflow.pcapng.out index 232c05673..fbb768a52 100644 --- a/tests/result/quic-fuzz-overflow.pcapng.out +++ b/tests/result/quic-fuzz-overflow.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 66 (66.00 diss/flow) QUIC 1 1280 1 diff --git a/tests/result/quic-mvfst-22.pcap.out b/tests/result/quic-mvfst-22.pcap.out index bdb46f7d3..983051106 100644 --- a/tests/result/quic-mvfst-22.pcap.out +++ b/tests/result/quic-mvfst-22.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Facebook 490 288303 1 diff --git a/tests/result/quic-mvfst-22_decryption_error.pcap.out b/tests/result/quic-mvfst-22_decryption_error.pcap.out index 18ce5dd71..4a0d7ae90 100644 --- a/tests/result/quic-mvfst-22_decryption_error.pcap.out +++ b/tests/result/quic-mvfst-22_decryption_error.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) QUIC 353 400490 1 diff --git a/tests/result/quic-mvfst-27.pcapng.out b/tests/result/quic-mvfst-27.pcapng.out index 6f46ac68a..5786d6cc5 100644 --- a/tests/result/quic-mvfst-27.pcapng.out +++ b/tests/result/quic-mvfst-27.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Facebook 20 11399 1 diff --git a/tests/result/quic-mvfst-exp.pcap.out b/tests/result/quic-mvfst-exp.pcap.out index bae20b59a..03bf8f207 100644 --- a/tests/result/quic-mvfst-exp.pcap.out +++ b/tests/result/quic-mvfst-exp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Facebook 30 26309 1 diff --git a/tests/result/quic-v2-01.pcapng.out b/tests/result/quic-v2-01.pcapng.out index 20c5c2ab5..a53f2c9b7 100644 --- a/tests/result/quic-v2-01.pcapng.out +++ b/tests/result/quic-v2-01.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 66 (66.00 diss/flow) QUIC 923 1311986 1 diff --git a/tests/result/quic.pcap.out b/tests/result/quic.pcap.out index 5f9c36fb7..ecfdbf853 100644 --- a/tests/result/quic.pcap.out +++ b/tests/result/quic.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 12 (1.20 pkts/flow) Confidence Match by IP : 1 (flows) Confidence DPI : 9 (flows) +Num dissector calls: 208 (20.80 diss/flow) GMail 413 254874 1 YouTube 85 76193 5 diff --git a/tests/result/quic046.pcap.out b/tests/result/quic046.pcap.out index 60d56c655..d44385c66 100644 --- a/tests/result/quic046.pcap.out +++ b/tests/result/quic046.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) YouTube 100 91297 1 diff --git a/tests/result/quic_0RTT.pcap.out b/tests/result/quic_0RTT.pcap.out index 030b85234..fe9920434 100644 --- a/tests/result/quic_0RTT.pcap.out +++ b/tests/result/quic_0RTT.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 64 (64.00 diss/flow) QUIC 2 2588 1 diff --git a/tests/result/quic_crypto_aes_auth_size.pcap.out b/tests/result/quic_crypto_aes_auth_size.pcap.out index 348eca908..b60bacc8f 100644 --- a/tests/result/quic_crypto_aes_auth_size.pcap.out +++ b/tests/result/quic_crypto_aes_auth_size.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) Snapchat 2 2784 2 diff --git a/tests/result/quic_frags_ch_in_multiple_packets.pcapng.out b/tests/result/quic_frags_ch_in_multiple_packets.pcapng.out index b4e32776d..f4bcb3018 100644 --- a/tests/result/quic_frags_ch_in_multiple_packets.pcapng.out +++ b/tests/result/quic_frags_ch_in_multiple_packets.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 64 (64.00 diss/flow) QUIC 4 3998 1 diff --git a/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out b/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out index c21a32dfa..88854a31b 100644 --- a/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out +++ b/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 113 (1.00 pkts/flow) Confidence DPI : 113 (flows) +Num dissector calls: 113 (1.00 diss/flow) DataSaver 1 1392 1 YouTube 21 29232 21 diff --git a/tests/result/quic_interop_V.pcapng.out b/tests/result/quic_interop_V.pcapng.out index aa0f7c36e..9e59c6e63 100644 --- a/tests/result/quic_interop_V.pcapng.out +++ b/tests/result/quic_interop_V.pcapng.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 63 (1.00 pkts/flow) DPI Packets (other): 14 (1.00 pkts/flow) Confidence DPI : 77 (flows) +Num dissector calls: 2767 (35.94 diss/flow) ICMP 21 7436 9 ICMPV6 10 10642 5 diff --git a/tests/result/quic_q39.pcap.out b/tests/result/quic_q39.pcap.out index 010f461a5..215ad4fc4 100644 --- a/tests/result/quic_q39.pcap.out +++ b/tests/result/quic_q39.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) YouTube 60 24185 1 diff --git a/tests/result/quic_q43.pcap.out b/tests/result/quic_q43.pcap.out index 8b5185802..4bd80c5c4 100644 --- a/tests/result/quic_q43.pcap.out +++ b/tests/result/quic_q43.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) DoH_DoT 2 1464 1 diff --git a/tests/result/quic_q46.pcap.out b/tests/result/quic_q46.pcap.out index 248c373db..9884d5c1f 100644 --- a/tests/result/quic_q46.pcap.out +++ b/tests/result/quic_q46.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Google 20 21241 1 diff --git a/tests/result/quic_q46_b.pcap.out b/tests/result/quic_q46_b.pcap.out index e7b17ecda..6926cfbf3 100644 --- a/tests/result/quic_q46_b.pcap.out +++ b/tests/result/quic_q46_b.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) YouTubeUpload 20 7020 1 diff --git a/tests/result/quic_q50.pcap.out b/tests/result/quic_q50.pcap.out index 3a6b9b4cc..d473ef615 100644 --- a/tests/result/quic_q50.pcap.out +++ b/tests/result/quic_q50.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) GoogleServices 20 20434 1 diff --git a/tests/result/quic_t50.pcap.out b/tests/result/quic_t50.pcap.out index dd0112bce..e5ee10948 100644 --- a/tests/result/quic_t50.pcap.out +++ b/tests/result/quic_t50.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) GoogleServices 12 8420 1 diff --git a/tests/result/quic_t51.pcap.out b/tests/result/quic_t51.pcap.out index a55f91799..03f6b811d 100644 --- a/tests/result/quic_t51.pcap.out +++ b/tests/result/quic_t51.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Google 642 573718 1 diff --git a/tests/result/quickplay.pcap.out b/tests/result/quickplay.pcap.out index a8fe90224..1b809c9a5 100644 --- a/tests/result/quickplay.pcap.out +++ b/tests/result/quickplay.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 8 DPI Packets (TCP): 75 (3.57 pkts/flow) Confidence DPI : 21 (flows) +Num dissector calls: 273 (13.00 diss/flow) HTTP 133 96179 11 QQ 12 4781 5 diff --git a/tests/result/radius_false_positive.pcapng.out b/tests/result/radius_false_positive.pcapng.out index 92cf768a2..511e6637f 100644 --- a/tests/result/radius_false_positive.pcapng.out +++ b/tests/result/radius_false_positive.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (UDP): 10 (10.00 pkts/flow) Confidence Unknown : 1 (flows) +Num dissector calls: 180 (180.00 diss/flow) Unknown 10 7479 1 diff --git a/tests/result/raknet.pcap.out b/tests/result/raknet.pcap.out index 1d1554407..9151e07e6 100644 --- a/tests/result/raknet.pcap.out +++ b/tests/result/raknet.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 24 (2.00 pkts/flow) Confidence DPI : 12 (flows) +Num dissector calls: 1404 (117.00 diss/flow) RakNet 66 9600 12 diff --git a/tests/result/rdp.pcap.out b/tests/result/rdp.pcap.out index c997bf124..8533a8fbd 100644 --- a/tests/result/rdp.pcap.out +++ b/tests/result/rdp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) RDP 2010 622743 1 diff --git a/tests/result/reasm_crash_anon.pcapng.out b/tests/result/reasm_crash_anon.pcapng.out index 8b11e7e00..66c11808f 100644 --- a/tests/result/reasm_crash_anon.pcapng.out +++ b/tests/result/reasm_crash_anon.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 81 (81.00 pkts/flow) Confidence Unknown : 1 (flows) +Num dissector calls: 335 (335.00 diss/flow) Unknown 200 20067 1 diff --git a/tests/result/reasm_segv_anon.pcapng.out b/tests/result/reasm_segv_anon.pcapng.out index 3fa9ca48e..cfed4a73d 100644 --- a/tests/result/reasm_segv_anon.pcapng.out +++ b/tests/result/reasm_segv_anon.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 81 (81.00 pkts/flow) Confidence Match by port : 1 (flows) +Num dissector calls: 338 (338.00 diss/flow) HTTP 82 77940 1 diff --git a/tests/result/reddit.pcap.out b/tests/result/reddit.pcap.out index 9d2720f32..399fcba38 100644 --- a/tests/result/reddit.pcap.out +++ b/tests/result/reddit.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 445 (7.42 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 59 (flows) +Num dissector calls: 839 (13.98 diss/flow) TLS 508 331149 13 Twitter 863 686585 3 diff --git a/tests/result/riotgames.pcap.out b/tests/result/riotgames.pcap.out index f721f235a..5186b2aec 100644 --- a/tests/result/riotgames.pcap.out +++ b/tests/result/riotgames.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 9 (1.00 pkts/flow) Confidence DPI : 9 (flows) +Num dissector calls: 891 (99.00 diss/flow) RiotGames 44 3953 9 diff --git a/tests/result/rsh-syslog-false-positive.pcap.out b/tests/result/rsh-syslog-false-positive.pcap.out index 7b8f7ed40..ab52d5d4a 100644 --- a/tests/result/rsh-syslog-false-positive.pcap.out +++ b/tests/result/rsh-syslog-false-positive.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Syslog 6 3335 1 diff --git a/tests/result/rsh.pcap.out b/tests/result/rsh.pcap.out index fc9b5cb13..7796b2f4e 100644 --- a/tests/result/rsh.pcap.out +++ b/tests/result/rsh.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (6.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 332 (166.00 diss/flow) RSH 24 1721 2 diff --git a/tests/result/rsync.pcap.out b/tests/result/rsync.pcap.out index 50dc46cb5..323118a22 100644 --- a/tests/result/rsync.pcap.out +++ b/tests/result/rsync.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 9 (9.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 188 (188.00 diss/flow) RSYNC 30 2493 1 diff --git a/tests/result/rtmp.pcap.out b/tests/result/rtmp.pcap.out index 2ea224b40..c78fd4d33 100644 --- a/tests/result/rtmp.pcap.out +++ b/tests/result/rtmp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 170 (170.00 diss/flow) RTMP 26 8368 1 diff --git a/tests/result/rtsp.pcap.out b/tests/result/rtsp.pcap.out index 77e48dbab..a59a794f2 100644 --- a/tests/result/rtsp.pcap.out +++ b/tests/result/rtsp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 87 (12.43 pkts/flow) Confidence DPI : 7 (flows) +Num dissector calls: 310 (44.29 diss/flow) RTSP 568 100872 7 diff --git a/tests/result/rtsp_setup_http.pcapng.out b/tests/result/rtsp_setup_http.pcapng.out index 19063a2bc..ebb7d8de7 100644 --- a/tests/result/rtsp_setup_http.pcapng.out +++ b/tests/result/rtsp_setup_http.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 4 (4.00 diss/flow) RTSP 1 233 1 diff --git a/tests/result/rx.pcap.out b/tests/result/rx.pcap.out index a0dd7a6d0..9875b4b2a 100644 --- a/tests/result/rx.pcap.out +++ b/tests/result/rx.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 10 (2.00 pkts/flow) Confidence DPI : 5 (flows) +Num dissector calls: 582 (116.40 diss/flow) RX 132 26475 5 diff --git a/tests/result/s7comm.pcap.out b/tests/result/s7comm.pcap.out index 58017119e..d544d44ad 100644 --- a/tests/result/s7comm.pcap.out +++ b/tests/result/s7comm.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) s7comm 55 5260 1 diff --git a/tests/result/safari.pcap.out b/tests/result/safari.pcap.out index d0f85071c..2aece435a 100644 --- a/tests/result/safari.pcap.out +++ b/tests/result/safari.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 46 (6.57 pkts/flow) Confidence DPI : 7 (flows) +Num dissector calls: 126 (18.00 diss/flow) TLS 6019 5570309 7 diff --git a/tests/result/salesforce.pcap.out b/tests/result/salesforce.pcap.out index 0d14b5927..eb832c64b 100644 --- a/tests/result/salesforce.pcap.out +++ b/tests/result/salesforce.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) Salesforce 15 5205 1 diff --git a/tests/result/sccp_hw_conf_register.pcapng.out b/tests/result/sccp_hw_conf_register.pcapng.out index a7f974e62..26f83a155 100644 --- a/tests/result/sccp_hw_conf_register.pcapng.out +++ b/tests/result/sccp_hw_conf_register.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) CiscoSkinny 17 1522 1 diff --git a/tests/result/sctp.cap.out b/tests/result/sctp.cap.out index ed4bc3343..b32f20b08 100644 --- a/tests/result/sctp.cap.out +++ b/tests/result/sctp.cap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (other): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) SCTP 4 340 2 diff --git a/tests/result/selfsigned.pcap.out b/tests/result/selfsigned.pcap.out index ff98d4b2c..2e2adf081 100644 --- a/tests/result/selfsigned.pcap.out +++ b/tests/result/selfsigned.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 25 (25.00 diss/flow) ntop 20 3766 1 diff --git a/tests/result/sflow.pcap.out b/tests/result/sflow.pcap.out index af5087b6d..2d8574ee6 100644 --- a/tests/result/sflow.pcap.out +++ b/tests/result/sflow.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 100 (100.00 diss/flow) sFlow 9 1702 1 diff --git a/tests/result/signal.pcap.out b/tests/result/signal.pcap.out index c1ffb2ead..d76d87f3b 100644 --- a/tests/result/signal.pcap.out +++ b/tests/result/signal.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 97 (6.47 pkts/flow) DPI Packets (UDP): 5 (1.67 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 19 (flows) +Num dissector calls: 223 (11.74 diss/flow) DNS 2 186 1 DHCP 4 1368 1 diff --git a/tests/result/simple-dnscrypt.pcap.out b/tests/result/simple-dnscrypt.pcap.out index 54613dd45..9c69a8afe 100644 --- a/tests/result/simple-dnscrypt.pcap.out +++ b/tests/result/simple-dnscrypt.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 47 (11.75 pkts/flow) Confidence DPI (cache) : 3 (flows) Confidence DPI : 1 (flows) +Num dissector calls: 72 (18.00 diss/flow) DNScrypt 111 44676 4 diff --git a/tests/result/sip.pcap.out b/tests/result/sip.pcap.out index b38ad45e2..d9bf9b690 100644 --- a/tests/result/sip.pcap.out +++ b/tests/result/sip.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (1.00 pkts/flow) Confidence DPI : 4 (flows) +Num dissector calls: 67 (16.75 diss/flow) RTP 9 1926 1 SIP 102 47087 2 diff --git a/tests/result/sip_hello.pcapng.out b/tests/result/sip_hello.pcapng.out index 45c1830d5..3dd0e2f29 100644 --- a/tests/result/sip_hello.pcapng.out +++ b/tests/result/sip_hello.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 9 (9.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 208 (208.00 diss/flow) SIP 30 5592 1 diff --git a/tests/result/sites.pcapng.out b/tests/result/sites.pcapng.out index 2883153bf..4f5397832 100644 --- a/tests/result/sites.pcapng.out +++ b/tests/result/sites.pcapng.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 3 (1.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence Match by IP : 3 (flows) Confidence DPI : 43 (flows) +Num dissector calls: 630 (13.40 diss/flow) HTTP 2 148 1 Xbox 4 2245 1 diff --git a/tests/result/skinny.pcap.out b/tests/result/skinny.pcap.out index 19eed6562..2704bde08 100644 --- a/tests/result/skinny.pcap.out +++ b/tests/result/skinny.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 3 (1.00 pkts/flow) DPI Packets (UDP): 5 (1.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 9 (flows) +Num dissector calls: 19 (2.11 diss/flow) ICMP 2 140 1 RTP 2871 614394 5 diff --git a/tests/result/skype-conference-call.pcap.out b/tests/result/skype-conference-call.pcap.out index 1487411b2..87da55736 100644 --- a/tests/result/skype-conference-call.pcap.out +++ b/tests/result/skype-conference-call.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 6 (6.00 diss/flow) Skype_TeamsCall 200 39687 1 diff --git a/tests/result/skype.pcap.out b/tests/result/skype.pcap.out index aa52ce445..fbb332b2e 100644 --- a/tests/result/skype.pcap.out +++ b/tests/result/skype.pcap.out @@ -7,6 +7,7 @@ Confidence Unknown : 61 (flows) Confidence Match by port : 27 (flows) Confidence Match by IP : 1 (flows) Confidence DPI : 204 (flows) +Num dissector calls: 32494 (110.90 diss/flow) Unknown 1575 272476 61 DNS 2 267 1 diff --git a/tests/result/skype_no_unknown.pcap.out b/tests/result/skype_no_unknown.pcap.out index afcd4f400..3c83f3c36 100644 --- a/tests/result/skype_no_unknown.pcap.out +++ b/tests/result/skype_no_unknown.pcap.out @@ -6,6 +6,7 @@ DPI Packets (other): 5 (1.00 pkts/flow) Confidence Unknown : 45 (flows) Confidence Match by port : 22 (flows) Confidence DPI : 200 (flows) +Num dissector calls: 26571 (99.52 diss/flow) Unknown 850 152468 45 DNS 2 267 1 diff --git a/tests/result/skype_udp.pcap.out b/tests/result/skype_udp.pcap.out index 3d05083b6..c3971d04d 100644 --- a/tests/result/skype_udp.pcap.out +++ b/tests/result/skype_udp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 99 (99.00 diss/flow) Skype_Teams 5 339 1 diff --git a/tests/result/smb_deletefile.pcap.out b/tests/result/smb_deletefile.pcap.out index b6766c377..e800742d6 100644 --- a/tests/result/smb_deletefile.pcap.out +++ b/tests/result/smb_deletefile.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) SMBv23 101 30748 1 diff --git a/tests/result/smb_frags.pcap.out b/tests/result/smb_frags.pcap.out index b6826fbca..69a0164b4 100644 --- a/tests/result/smb_frags.pcap.out +++ b/tests/result/smb_frags.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 5 (5.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 161 (161.00 diss/flow) SMBv1 8 2763 1 diff --git a/tests/result/smbv1.pcap.out b/tests/result/smbv1.pcap.out index e411bf176..682276185 100644 --- a/tests/result/smbv1.pcap.out +++ b/tests/result/smbv1.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 3 (3.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 153 (153.00 diss/flow) SMBv1 7 1197 1 diff --git a/tests/result/smpp_in_general.pcap.out b/tests/result/smpp_in_general.pcap.out index 4351ddeec..57ba71483 100644 --- a/tests/result/smpp_in_general.pcap.out +++ b/tests/result/smpp_in_general.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 104 (104.00 diss/flow) SMPP 17 1144 1 diff --git a/tests/result/smtp-starttls.pcap.out b/tests/result/smtp-starttls.pcap.out index 15243e040..4211cd474 100644 --- a/tests/result/smtp-starttls.pcap.out +++ b/tests/result/smtp-starttls.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 11 (11.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) Google 36 8403 1 diff --git a/tests/result/smtp.pcap.out b/tests/result/smtp.pcap.out index bf500c092..9e70e354e 100644 --- a/tests/result/smtp.pcap.out +++ b/tests/result/smtp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 11 (11.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 212 (212.00 diss/flow) SMTP 95 23157 1 diff --git a/tests/result/smtps.pcapng.out b/tests/result/smtps.pcapng.out index 1d530ca3e..6ce445685 100644 --- a/tests/result/smtps.pcapng.out +++ b/tests/result/smtps.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 3 (3.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 15 (15.00 diss/flow) SMTPS 4 936 1 diff --git a/tests/result/snapchat.pcap.out b/tests/result/snapchat.pcap.out index 703cde00b..a2781a132 100644 --- a/tests/result/snapchat.pcap.out +++ b/tests/result/snapchat.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 18 (6.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 54 (18.00 diss/flow) Google 22 2879 1 Snapchat 34 7320 2 diff --git a/tests/result/snapchat_call.pcapng.out b/tests/result/snapchat_call.pcapng.out index 8e7e510ec..cdb910cee 100644 --- a/tests/result/snapchat_call.pcapng.out +++ b/tests/result/snapchat_call.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 20 (20.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) SnapchatCall 50 12772 1 diff --git a/tests/result/snmp.pcap.out b/tests/result/snmp.pcap.out index d862e54f8..90b0dcb47 100644 --- a/tests/result/snmp.pcap.out +++ b/tests/result/snmp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 2 DPI Packets (UDP): 24 (1.41 pkts/flow) Confidence DPI : 17 (flows) +Num dissector calls: 17 (1.00 diss/flow) SNMP 72 14435 17 diff --git a/tests/result/soap.pcap.out b/tests/result/soap.pcap.out index 00c046ee6..5e6d6b8b4 100644 --- a/tests/result/soap.pcap.out +++ b/tests/result/soap.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 11 (3.67 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 369 (123.00 diss/flow) Microsoft 1 1506 1 SOAP 19 9442 2 diff --git a/tests/result/socks-http-example.pcap.out b/tests/result/socks-http-example.pcap.out index d369f4a3b..16aab48eb 100644 --- a/tests/result/socks-http-example.pcap.out +++ b/tests/result/socks-http-example.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 29 (9.67 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 2 (flows) +Num dissector calls: 531 (177.00 diss/flow) SOCKS 46 8383 3 diff --git a/tests/result/softether-http.pcap.out b/tests/result/softether-http.pcap.out index d307499a8..702d3a2d6 100644 --- a/tests/result/softether-http.pcap.out +++ b/tests/result/softether-http.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) Softether 4 1392 1 diff --git a/tests/result/someip-tp.pcap.out b/tests/result/someip-tp.pcap.out index 5c7e04e9a..1e2647135 100644 --- a/tests/result/someip-tp.pcap.out +++ b/tests/result/someip-tp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 72 (72.00 diss/flow) SOMEIP 9 12850 1 diff --git a/tests/result/someip-udp-method-call.pcapng.out b/tests/result/someip-udp-method-call.pcapng.out index 823b192a0..81f130551 100644 --- a/tests/result/someip-udp-method-call.pcapng.out +++ b/tests/result/someip-udp-method-call.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 144 (72.00 diss/flow) SOMEIP 3 504 2 diff --git a/tests/result/someip_sd_sample.pcap.out b/tests/result/someip_sd_sample.pcap.out index 3a68e04af..236f6a361 100644 --- a/tests/result/someip_sd_sample.pcap.out +++ b/tests/result/someip_sd_sample.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) SOMEIP 6 660 2 diff --git a/tests/result/sql_injection.pcap.out b/tests/result/sql_injection.pcap.out index 654b3c3b8..936e6b9c8 100644 --- a/tests/result/sql_injection.pcap.out +++ b/tests/result/sql_injection.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 3 (3.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 15 (15.00 diss/flow) HTTP 5 2748 1 diff --git a/tests/result/ssdp-m-search-ua.pcap.out b/tests/result/ssdp-m-search-ua.pcap.out index d1eafe458..17095732a 100644 --- a/tests/result/ssdp-m-search-ua.pcap.out +++ b/tests/result/ssdp-m-search-ua.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 33 (33.00 diss/flow) SSDP 4 864 1 diff --git a/tests/result/ssdp-m-search.pcap.out b/tests/result/ssdp-m-search.pcap.out index f5724685e..56b9728de 100644 --- a/tests/result/ssdp-m-search.pcap.out +++ b/tests/result/ssdp-m-search.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 33 (33.00 diss/flow) SSDP 19 1197 1 diff --git a/tests/result/ssh.pcap.out b/tests/result/ssh.pcap.out index 45bd76273..0e3295097 100644 --- a/tests/result/ssh.pcap.out +++ b/tests/result/ssh.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (10.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) SSH 258 35546 1 diff --git a/tests/result/ssl-cert-name-mismatch.pcap.out b/tests/result/ssl-cert-name-mismatch.pcap.out index fe541fe63..264617bed 100644 --- a/tests/result/ssl-cert-name-mismatch.pcap.out +++ b/tests/result/ssl-cert-name-mismatch.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (10.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) GoogleCloud 21 5412 1 diff --git a/tests/result/starcraft_battle.pcap.out b/tests/result/starcraft_battle.pcap.out index 45ee80271..71d76cc25 100644 --- a/tests/result/starcraft_battle.pcap.out +++ b/tests/result/starcraft_battle.pcap.out @@ -6,6 +6,7 @@ DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by port : 8 (flows) Confidence Match by IP : 5 (flows) Confidence DPI : 39 (flows) +Num dissector calls: 1954 (37.58 diss/flow) DNS 26 2848 7 HTTP 450 294880 19 diff --git a/tests/result/steam.pcap.out b/tests/result/steam.pcap.out index 78d96540b..d52b6df09 100644 --- a/tests/result/steam.pcap.out +++ b/tests/result/steam.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 55 (1.00 pkts/flow) Confidence DPI : 55 (flows) +Num dissector calls: 1485 (27.00 diss/flow) Steam 104 9020 55 diff --git a/tests/result/steam_datagram_relay_ping.pcapng.out b/tests/result/steam_datagram_relay_ping.pcapng.out index 5ed6f8c97..c7d1a3ecc 100644 --- a/tests/result/steam_datagram_relay_ping.pcapng.out +++ b/tests/result/steam_datagram_relay_ping.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 27 (27.00 diss/flow) Steam 2 2684 1 diff --git a/tests/result/stun_facebook.pcapng.out b/tests/result/stun_facebook.pcapng.out index ebde1286d..1487b2b33 100644 --- a/tests/result/stun_facebook.pcapng.out +++ b/tests/result/stun_facebook.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 100 (100.00 diss/flow) FacebookVoip 75 10554 1 diff --git a/tests/result/stun_signal.pcapng.out b/tests/result/stun_signal.pcapng.out index df492e93a..ddf62cc95 100644 --- a/tests/result/stun_signal.pcapng.out +++ b/tests/result/stun_signal.pcapng.out @@ -5,6 +5,7 @@ DPI Packets (other): 2 (1.00 pkts/flow) Confidence DPI (partial) : 1 (flows) Confidence DPI (cache) : 2 (flows) Confidence DPI : 20 (flows) +Num dissector calls: 1838 (79.91 diss/flow) ICMP 53 5186 2 GoogleHangoutDuo 40 2720 4 diff --git a/tests/result/synscan.pcap.out b/tests/result/synscan.pcap.out index 9cf25e027..9f67e2214 100644 --- a/tests/result/synscan.pcap.out +++ b/tests/result/synscan.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1992 DPI Packets (TCP): 2011 (1.01 pkts/flow) Confidence Unknown : 1868 (flows) Confidence Match by port : 126 (flows) +Num dissector calls: 13987 (7.01 diss/flow) Unknown 1872 108584 1868 FTP_CONTROL 2 116 2 diff --git a/tests/result/syslog.pcap.out b/tests/result/syslog.pcap.out index 311497522..7d794c4db 100644 --- a/tests/result/syslog.pcap.out +++ b/tests/result/syslog.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 10 (5.00 pkts/flow) DPI Packets (UDP): 20 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 21 (flows) +Num dissector calls: 75 (3.41 diss/flow) Unknown 1 78 1 Syslog 93 20321 21 diff --git a/tests/result/targusdataspeed_false_positives.pcap.out b/tests/result/targusdataspeed_false_positives.pcap.out index eb6501471..08a78953b 100644 --- a/tests/result/targusdataspeed_false_positives.pcap.out +++ b/tests/result/targusdataspeed_false_positives.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 2 DPI Packets (UDP): 4 (2.00 pkts/flow) Confidence DPI (cache) : 2 (flows) +Num dissector calls: 162 (81.00 diss/flow) BitTorrent 4 939 2 diff --git a/tests/result/teams.pcap.out b/tests/result/teams.pcap.out index 48da11ef9..c44fdba1b 100644 --- a/tests/result/teams.pcap.out +++ b/tests/result/teams.pcap.out @@ -7,6 +7,7 @@ Confidence Unknown : 1 (flows) Confidence Match by IP : 1 (flows) Confidence DPI (partial) : 1 (flows) Confidence DPI : 80 (flows) +Num dissector calls: 1283 (15.46 diss/flow) Unknown 4 456 1 DNS 10 1357 5 diff --git a/tests/result/teamspeak3.pcap.out b/tests/result/teamspeak3.pcap.out index 7ac16c057..ce9cd1498 100644 --- a/tests/result/teamspeak3.pcap.out +++ b/tests/result/teamspeak3.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 61 (61.00 diss/flow) TeamSpeak 13 1911 1 diff --git a/tests/result/teamviewer.pcap.out b/tests/result/teamviewer.pcap.out index 7da361048..e2cb0a102 100644 --- a/tests/result/teamviewer.pcap.out +++ b/tests/result/teamviewer.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) DPI Packets (UDP): 4 (4.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 161 (80.50 diss/flow) TeamViewer 1298 704218 2 diff --git a/tests/result/telegram.pcap.out b/tests/result/telegram.pcap.out index a37afc138..284f205d3 100644 --- a/tests/result/telegram.pcap.out +++ b/tests/result/telegram.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 5 DPI Packets (UDP): 93 (1.94 pkts/flow) Confidence Unknown : 2 (flows) Confidence DPI : 46 (flows) +Num dissector calls: 1676 (34.92 diss/flow) Unknown 304 72496 2 DNS 8 716 4 diff --git a/tests/result/telnet.pcap.out b/tests/result/telnet.pcap.out index 103c29bae..c32e97589 100644 --- a/tests/result/telnet.pcap.out +++ b/tests/result/telnet.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 33 (33.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 167 (167.00 diss/flow) Telnet 87 7418 1 diff --git a/tests/result/teredo.pcap.out b/tests/result/teredo.pcap.out index fa4ff718f..d7fd5407b 100644 --- a/tests/result/teredo.pcap.out +++ b/tests/result/teredo.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 5 (1.00 pkts/flow) Confidence DPI : 5 (flows) +Num dissector calls: 45 (9.00 diss/flow) Teredo 24 2574 5 diff --git a/tests/result/tftp.pcap.out b/tests/result/tftp.pcap.out index e3909a451..9aa19884c 100644 --- a/tests/result/tftp.pcap.out +++ b/tests/result/tftp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 13 (1.86 pkts/flow) Confidence DPI : 7 (flows) +Num dissector calls: 300 (42.86 diss/flow) TFTP 107 31296 7 diff --git a/tests/result/threema.pcap.out b/tests/result/threema.pcap.out index 7e313fe7a..5ed877b48 100644 --- a/tests/result/threema.pcap.out +++ b/tests/result/threema.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 2 DPI Packets (TCP): 66 (11.00 pkts/flow) Confidence Match by IP : 2 (flows) Confidence DPI : 4 (flows) +Num dissector calls: 1348 (224.67 diss/flow) Threema 83 11578 6 diff --git a/tests/result/tinc.pcap.out b/tests/result/tinc.pcap.out index db6cd0bca..3673c2105 100644 --- a/tests/result/tinc.pcap.out +++ b/tests/result/tinc.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 19 (9.50 pkts/flow) DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI (cache) : 2 (flows) Confidence DPI : 2 (flows) +Num dissector calls: 565 (141.25 diss/flow) TINC 317 352291 4 diff --git a/tests/result/tk.pcap.out b/tests/result/tk.pcap.out index 9c06fe025..7a6332220 100644 --- a/tests/result/tk.pcap.out +++ b/tests/result/tk.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 6 (2.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 3 (1.00 diss/flow) DNS 6 566 3 diff --git a/tests/result/tls-appdata.pcap.out b/tests/result/tls-appdata.pcap.out index 1255d2137..c64ac8014 100644 --- a/tests/result/tls-appdata.pcap.out +++ b/tests/result/tls-appdata.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 20 (10.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 123 (61.50 diss/flow) Facebook 6 789 1 Twitch 114 119156 1 diff --git a/tests/result/tls-esni-fuzzed.pcap.out b/tests/result/tls-esni-fuzzed.pcap.out index e645d170c..621953716 100644 --- a/tests/result/tls-esni-fuzzed.pcap.out +++ b/tests/result/tls-esni-fuzzed.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 3 DPI Packets (TCP): 3 (1.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 3 (1.00 diss/flow) Cloudflare 3 2310 3 diff --git a/tests/result/tls-rdn-extract.pcap.out b/tests/result/tls-rdn-extract.pcap.out index a5b2fc952..022d07a28 100644 --- a/tests/result/tls-rdn-extract.pcap.out +++ b/tests/result/tls-rdn-extract.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) Microsoft 6 7205 1 diff --git a/tests/result/tls_alert.pcap.out b/tests/result/tls_alert.pcap.out index e9f0cc6a0..6726ca2b0 100644 --- a/tests/result/tls_alert.pcap.out +++ b/tests/result/tls_alert.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 12 (6.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 19 (9.50 diss/flow) TLS 7 533 1 Google 11 952 1 diff --git a/tests/result/tls_certificate_too_long.pcap.out b/tests/result/tls_certificate_too_long.pcap.out index a8f9af328..f3c6e29c0 100644 --- a/tests/result/tls_certificate_too_long.pcap.out +++ b/tests/result/tls_certificate_too_long.pcap.out @@ -6,6 +6,7 @@ DPI Packets (other): 2 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by IP : 1 (flows) Confidence DPI : 33 (flows) +Num dissector calls: 784 (22.40 diss/flow) Unknown 13 5582 1 MDNS 5 983 3 diff --git a/tests/result/tls_cipher_lens.pcap.out b/tests/result/tls_cipher_lens.pcap.out index 1a80771e2..4696df09e 100644 --- a/tests/result/tls_cipher_lens.pcap.out +++ b/tests/result/tls_cipher_lens.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 5 DPI Packets (TCP): 5 (1.00 pkts/flow) Confidence DPI : 5 (flows) +Num dissector calls: 5 (1.00 diss/flow) Google 5 1165 5 diff --git a/tests/result/tls_esni_sni_both.pcap.out b/tests/result/tls_esni_sni_both.pcap.out index 7ea6af06b..ffc582aa1 100644 --- a/tests/result/tls_esni_sni_both.pcap.out +++ b/tests/result/tls_esni_sni_both.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 12 (6.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 36 (18.00 diss/flow) Cloudflare 38 15899 2 diff --git a/tests/result/tls_false_positives.pcapng.out b/tests/result/tls_false_positives.pcapng.out index dd4a97f0c..5b13c02a8 100644 --- a/tests/result/tls_false_positives.pcapng.out +++ b/tests/result/tls_false_positives.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 30 (30.00 pkts/flow) Confidence Unknown : 1 (flows) +Num dissector calls: 407 (407.00 diss/flow) Unknown 30 37313 1 diff --git a/tests/result/tls_invalid_reads.pcap.out b/tests/result/tls_invalid_reads.pcap.out index 67e47b12b..3ff497c2f 100644 --- a/tests/result/tls_invalid_reads.pcap.out +++ b/tests/result/tls_invalid_reads.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 2 DPI Packets (TCP): 10 (3.33 pkts/flow) Confidence Match by IP : 1 (flows) Confidence DPI : 2 (flows) +Num dissector calls: 147 (49.00 diss/flow) TLS 7 1827 1 Crashlytics 3 560 1 diff --git a/tests/result/tls_long_cert.pcap.out b/tests/result/tls_long_cert.pcap.out index 219c6ecb3..ae1ee5a6d 100644 --- a/tests/result/tls_long_cert.pcap.out +++ b/tests/result/tls_long_cert.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 9 (9.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) TLS 182 117601 1 diff --git a/tests/result/tls_port_80.pcapng.out b/tests/result/tls_port_80.pcapng.out index 7d774dcef..d498233dd 100644 --- a/tests/result/tls_port_80.pcapng.out +++ b/tests/result/tls_port_80.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 13 (13.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 20 (20.00 diss/flow) TLS 13 2439 1 diff --git a/tests/result/tls_torrent.pcapng.out b/tests/result/tls_torrent.pcapng.out index 409cf66f0..c80af76a0 100644 --- a/tests/result/tls_torrent.pcapng.out +++ b/tests/result/tls_torrent.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 13 (13.00 diss/flow) BitTorrent 7 6308 1 diff --git a/tests/result/tls_verylong_certificate.pcap.out b/tests/result/tls_verylong_certificate.pcap.out index fdd8f9e6e..8f74dda01 100644 --- a/tests/result/tls_verylong_certificate.pcap.out +++ b/tests/result/tls_verylong_certificate.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 11 (11.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) TLS 48 22229 1 diff --git a/tests/result/toca-boca.pcap.out b/tests/result/toca-boca.pcap.out index 49ffd4590..12660a0ab 100644 --- a/tests/result/toca-boca.pcap.out +++ b/tests/result/toca-boca.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 4 DPI Packets (UDP): 21 (1.00 pkts/flow) Confidence Match by port : 4 (flows) Confidence DPI : 17 (flows) +Num dissector calls: 413 (19.67 diss/flow) TocaBoca 77 15576 21 diff --git a/tests/result/tor.pcap.out b/tests/result/tor.pcap.out index 8a954fb95..28806f21e 100644 --- a/tests/result/tor.pcap.out +++ b/tests/result/tor.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 43 (5.38 pkts/flow) DPI Packets (UDP): 3 (1.00 pkts/flow) Confidence Match by IP : 1 (flows) Confidence DPI : 10 (flows) +Num dissector calls: 177 (16.09 diss/flow) SMBv1 1 252 1 TLS 2028 1601908 4 diff --git a/tests/result/trickbot.pcap.out b/tests/result/trickbot.pcap.out index dadffbca4..d4aea00d4 100644 --- a/tests/result/trickbot.pcap.out +++ b/tests/result/trickbot.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) HTTP 74 62002 1 diff --git a/tests/result/tumblr.pcap.out b/tests/result/tumblr.pcap.out index 3a38e36cd..0b351ebbf 100644 --- a/tests/result/tumblr.pcap.out +++ b/tests/result/tumblr.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 32 DPI Packets (TCP): 237 (5.04 pkts/flow) Confidence Match by port : 28 (flows) Confidence DPI : 19 (flows) +Num dissector calls: 411 (8.74 diss/flow) Yahoo 31 9933 1 Tumblr 1733 1208864 2 diff --git a/tests/result/tunnelbear.pcap.out b/tests/result/tunnelbear.pcap.out index d2bd8a86e..109e3b5c6 100644 --- a/tests/result/tunnelbear.pcap.out +++ b/tests/result/tunnelbear.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 3 DPI Packets (TCP): 125 (5.95 pkts/flow) Confidence Match by IP : 1 (flows) Confidence DPI : 20 (flows) +Num dissector calls: 379 (18.05 diss/flow) TLS 34 13737 2 Google 5 306 1 diff --git a/tests/result/ubntac2.pcap.out b/tests/result/ubntac2.pcap.out index 87f4692c8..9624272f4 100644 --- a/tests/result/ubntac2.pcap.out +++ b/tests/result/ubntac2.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 8 (1.00 pkts/flow) Confidence DPI : 8 (flows) +Num dissector calls: 8 (1.00 diss/flow) UBNTAC2 8 1736 8 diff --git a/tests/result/ultrasurf.pcap.out b/tests/result/ultrasurf.pcap.out index ff200728f..45bbc93f4 100644 --- a/tests/result/ultrasurf.pcap.out +++ b/tests/result/ultrasurf.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 13 (4.33 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 160 (53.33 diss/flow) TLS 5171 5127023 2 UltraSurf 2971 2991918 1 diff --git a/tests/result/upnp.pcap.out b/tests/result/upnp.pcap.out index 1d9a7be8b..0fc52543c 100644 --- a/tests/result/upnp.pcap.out +++ b/tests/result/upnp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) WSD 14 9912 2 diff --git a/tests/result/viber.pcap.out b/tests/result/viber.pcap.out index a5cdfbea4..cfd203dff 100644 --- a/tests/result/viber.pcap.out +++ b/tests/result/viber.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 27 (1.93 pkts/flow) DPI Packets (other): 2 (1.00 pkts/flow) Confidence Match by IP : 4 (flows) Confidence DPI : 25 (flows) +Num dissector calls: 757 (26.10 diss/flow) DNS 8 1267 4 MDNS 4 412 1 diff --git a/tests/result/vnc.pcap.out b/tests/result/vnc.pcap.out index 70dd04b6c..760f06f35 100644 --- a/tests/result/vnc.pcap.out +++ b/tests/result/vnc.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (5.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 286 (143.00 diss/flow) VNC 4551 329158 2 diff --git a/tests/result/vrrp3.pcapng.out b/tests/result/vrrp3.pcapng.out index afc245a4e..7bbaf5d26 100644 --- a/tests/result/vrrp3.pcapng.out +++ b/tests/result/vrrp3.pcapng.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (other): 2 (1.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) VRRP 10 820 2 diff --git a/tests/result/vxlan.pcap.out b/tests/result/vxlan.pcap.out index 3ea4fc2e6..e1e77df5f 100644 --- a/tests/result/vxlan.pcap.out +++ b/tests/result/vxlan.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 9 (1.00 pkts/flow) Confidence DPI : 9 (flows) +Num dissector calls: 9 (1.00 diss/flow) VXLAN 127 85322 9 diff --git a/tests/result/wa_video.pcap.out b/tests/result/wa_video.pcap.out index e6b1a6365..0d490880b 100644 --- a/tests/result/wa_video.pcap.out +++ b/tests/result/wa_video.pcap.out @@ -4,6 +4,7 @@ DPI Packets (TCP): 81 (81.00 pkts/flow) DPI Packets (UDP): 13 (1.00 pkts/flow) Confidence Match by IP : 1 (flows) Confidence DPI : 13 (flows) +Num dissector calls: 545 (38.93 diss/flow) SSDP 8 1377 3 DHCP 2 684 1 diff --git a/tests/result/wa_voice.pcap.out b/tests/result/wa_voice.pcap.out index a4c3d80bb..02d1f638e 100644 --- a/tests/result/wa_voice.pcap.out +++ b/tests/result/wa_voice.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 33 (1.57 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 27 (flows) +Num dissector calls: 508 (18.14 diss/flow) Unknown 2 120 1 MDNS 10 1188 2 diff --git a/tests/result/waze.pcap.out b/tests/result/waze.pcap.out index 0a4703759..54d289469 100644 --- a/tests/result/waze.pcap.out +++ b/tests/result/waze.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 9 (flows) Confidence DPI : 23 (flows) +Num dissector calls: 990 (30.00 diss/flow) Unknown 10 786 1 HTTP 65 64777 8 diff --git a/tests/result/webex.pcap.out b/tests/result/webex.pcap.out index 15ae9de2a..12c19e46a 100644 --- a/tests/result/webex.pcap.out +++ b/tests/result/webex.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 17 (8.50 pkts/flow) Confidence Match by port : 1 (flows) Confidence Match by IP : 3 (flows) Confidence DPI : 53 (flows) +Num dissector calls: 1247 (21.88 diss/flow) HTTP 22 3182 2 TLS 106 11841 8 diff --git a/tests/result/websocket.pcap.out b/tests/result/websocket.pcap.out index 3892c937b..c6009276f 100644 --- a/tests/result/websocket.pcap.out +++ b/tests/result/websocket.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 108 (108.00 diss/flow) WebSocket 5 441 1 diff --git a/tests/result/wechat.pcap.out b/tests/result/wechat.pcap.out index b89889679..faa9524f8 100644 --- a/tests/result/wechat.pcap.out +++ b/tests/result/wechat.pcap.out @@ -6,6 +6,7 @@ DPI Packets (other): 7 (1.00 pkts/flow) Confidence Match by port : 17 (flows) Confidence Match by IP : 8 (flows) Confidence DPI : 78 (flows) +Num dissector calls: 1811 (17.58 diss/flow) DNS 13 1075 8 HTTP 70 4620 8 diff --git a/tests/result/weibo.pcap.out b/tests/result/weibo.pcap.out index e1845eb75..93549c109 100644 --- a/tests/result/weibo.pcap.out +++ b/tests/result/weibo.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 44 (3.14 pkts/flow) Confidence Match by port : 13 (flows) Confidence Match by IP : 8 (flows) Confidence DPI : 23 (flows) +Num dissector calls: 987 (22.43 diss/flow) DNS 6 630 3 HTTP 19 2275 5 diff --git a/tests/result/whatsapp.pcap.out b/tests/result/whatsapp.pcap.out index eaf7eeac0..5fb2e26a1 100644 --- a/tests/result/whatsapp.pcap.out +++ b/tests/result/whatsapp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 344 (4.00 pkts/flow) Confidence DPI : 86 (flows) +Num dissector calls: 13330 (155.00 diss/flow) WhatsApp 679 96293 86 diff --git a/tests/result/whatsapp_login_call.pcap.out b/tests/result/whatsapp_login_call.pcap.out index cf99d8a35..9ad6d881e 100644 --- a/tests/result/whatsapp_login_call.pcap.out +++ b/tests/result/whatsapp_login_call.pcap.out @@ -6,6 +6,7 @@ DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by port : 4 (flows) Confidence Match by IP : 16 (flows) Confidence DPI : 37 (flows) +Num dissector calls: 767 (13.46 diss/flow) HTTP 11 726 3 MDNS 8 952 4 diff --git a/tests/result/whatsapp_login_chat.pcap.out b/tests/result/whatsapp_login_chat.pcap.out index 834153151..529977ee5 100644 --- a/tests/result/whatsapp_login_chat.pcap.out +++ b/tests/result/whatsapp_login_chat.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 2 DPI Packets (TCP): 25 (8.33 pkts/flow) DPI Packets (UDP): 7 (1.17 pkts/flow) Confidence DPI : 9 (flows) +Num dissector calls: 320 (35.56 diss/flow) MDNS 2 202 2 DHCP 6 2052 1 diff --git a/tests/result/whatsapp_voice_and_message.pcap.out b/tests/result/whatsapp_voice_and_message.pcap.out index 2de09a328..35f953260 100644 --- a/tests/result/whatsapp_voice_and_message.pcap.out +++ b/tests/result/whatsapp_voice_and_message.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 20 (4.00 pkts/flow) DPI Packets (UDP): 8 (1.00 pkts/flow) Confidence DPI : 13 (flows) +Num dissector calls: 568 (43.69 diss/flow) WhatsAppCall 44 5916 8 WhatsApp 217 22139 5 diff --git a/tests/result/whatsappfiles.pcap.out b/tests/result/whatsappfiles.pcap.out index 38cb53a1b..86152b7a0 100644 --- a/tests/result/whatsappfiles.pcap.out +++ b/tests/result/whatsappfiles.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 14 (7.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 36 (18.00 diss/flow) WhatsAppFiles 620 452233 2 diff --git a/tests/result/whois.pcapng.out b/tests/result/whois.pcapng.out index 1a005622c..5bd20e422 100644 --- a/tests/result/whois.pcapng.out +++ b/tests/result/whois.pcapng.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 16 (5.33 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 2 (flows) +Num dissector calls: 222 (74.00 diss/flow) TLS 7 2046 1 Whois-DAS 16 4294 2 diff --git a/tests/result/windowsupdate_over_http.pcap.out b/tests/result/windowsupdate_over_http.pcap.out index 5fb1a34af..215aba005 100644 --- a/tests/result/windowsupdate_over_http.pcap.out +++ b/tests/result/windowsupdate_over_http.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 32 (32.00 diss/flow) WindowsUpdate 20 15975 1 diff --git a/tests/result/wireguard.pcap.out b/tests/result/wireguard.pcap.out index 53a0dc5db..ae3ea6e24 100644 --- a/tests/result/wireguard.pcap.out +++ b/tests/result/wireguard.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 140 (140.00 diss/flow) WireGuard 2399 734182 1 diff --git a/tests/result/wow.pcap.out b/tests/result/wow.pcap.out index 1de1018fd..1c8107121 100644 --- a/tests/result/wow.pcap.out +++ b/tests/result/wow.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 36 (7.20 pkts/flow) Confidence DPI : 5 (flows) +Num dissector calls: 237 (47.40 diss/flow) WorldOfWarcraft 95 10688 5 diff --git a/tests/result/xdmcp.pcap.out b/tests/result/xdmcp.pcap.out index 7335531f4..fbabddc46 100644 --- a/tests/result/xdmcp.pcap.out +++ b/tests/result/xdmcp.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 1 (1.00 diss/flow) XDMCP 6 598 1 diff --git a/tests/result/xiaomi.pcap.out b/tests/result/xiaomi.pcap.out index be8cdd486..9ee5e97ed 100644 --- a/tests/result/xiaomi.pcap.out +++ b/tests/result/xiaomi.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 19 (2.71 pkts/flow) Confidence DPI : 7 (flows) +Num dissector calls: 779 (111.29 diss/flow) Xiaomi 52 11467 7 diff --git a/tests/result/xss.pcap.out b/tests/result/xss.pcap.out index f90889953..60ca773de 100644 --- a/tests/result/xss.pcap.out +++ b/tests/result/xss.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 9 (4.50 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 1 (flows) +Num dissector calls: 49 (24.50 diss/flow) HTTP 11 3209 2 diff --git a/tests/result/youtube_quic.pcap.out b/tests/result/youtube_quic.pcap.out index 253bcf8e7..ccafd12d9 100644 --- a/tests/result/youtube_quic.pcap.out +++ b/tests/result/youtube_quic.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 3 (1.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 3 (1.00 diss/flow) YouTube 258 178495 1 Google 31 13144 2 diff --git a/tests/result/youtubeupload.pcap.out b/tests/result/youtubeupload.pcap.out index cfccd2abe..1e9e69b24 100644 --- a/tests/result/youtubeupload.pcap.out +++ b/tests/result/youtubeupload.pcap.out @@ -3,6 +3,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 8 (8.00 pkts/flow) DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 3 (flows) +Num dissector calls: 20 (6.67 diss/flow) YouTubeUpload 137 127038 3 diff --git a/tests/result/z3950.pcapng.out b/tests/result/z3950.pcapng.out index 2eb529350..89c9cdf84 100644 --- a/tests/result/z3950.pcapng.out +++ b/tests/result/z3950.pcapng.out @@ -3,6 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 26 (13.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 1 (flows) +Num dissector calls: 502 (251.00 diss/flow) Z3950 31 6308 2 diff --git a/tests/result/zabbix.pcap.out b/tests/result/zabbix.pcap.out index 38196ca07..de10216f7 100644 --- a/tests/result/zabbix.pcap.out +++ b/tests/result/zabbix.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 18 (18.00 diss/flow) Zabbix 10 715 1 diff --git a/tests/result/zattoo.pcap.out b/tests/result/zattoo.pcap.out index 7fe20a205..1ebbdef98 100644 --- a/tests/result/zattoo.pcap.out +++ b/tests/result/zattoo.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 10 (5.00 pkts/flow) Confidence DPI : 2 (flows) +Num dissector calls: 49 (24.50 diss/flow) Zattoo 32 13467 2 diff --git a/tests/result/zcash.pcap.out b/tests/result/zcash.pcap.out index 82fd3acff..a17fc501a 100644 --- a/tests/result/zcash.pcap.out +++ b/tests/result/zcash.pcap.out @@ -2,6 +2,7 @@ Guessed flow protos: 0 DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) +Num dissector calls: 47 (47.00 diss/flow) Mining 145 20644 1 diff --git a/tests/result/zoom.pcap.out b/tests/result/zoom.pcap.out index 470d53e1c..c9c40ec39 100644 --- a/tests/result/zoom.pcap.out +++ b/tests/result/zoom.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 25 (1.47 pkts/flow) DPI Packets (other): 2 (1.00 pkts/flow) Confidence Match by IP : 2 (flows) Confidence DPI : 31 (flows) +Num dissector calls: 971 (29.42 diss/flow) DNS 2 205 1 MDNS 1 87 1 diff --git a/tests/result/zoom2.pcap.out b/tests/result/zoom2.pcap.out index d6f3641a8..aeaa48b98 100644 --- a/tests/result/zoom2.pcap.out +++ b/tests/result/zoom2.pcap.out @@ -5,6 +5,7 @@ DPI Packets (UDP): 75 (25.00 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by IP : 3 (flows) Confidence DPI : 2 (flows) +Num dissector calls: 940 (188.00 diss/flow) ICMP 27 1890 1 Zoom 11950 9004950 4 |