diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2025-01-12 13:24:27 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-01-12 13:24:27 +0100 |
| commit | 72fd94030142d277d969d1a9cff6e9c4d760cdbb (patch) | |
| tree | eae6c79d6e57698efe3d418d1f394d9fde7906ba /tests/cfgs/default/result/dingtalk.pcap.out | |
| parent | 5c0143ce58c86fc678c5fdc7aae859fbd8a67a9f (diff) | |
Remove JA3C output from ndpiReader (#2667)
Removing JA3C is an big task. Let's start with a simple change having an
huge impact on unit tests: remove printing of JA3C information from
ndpiReader.
This way, when we will delete the actual code, the unit tests diffs
should be a lot simpler to look at.
Note that the information if the client/server cipher is weak or
obsolete is still available via flow risk
See: #2551
Diffstat (limited to 'tests/cfgs/default/result/dingtalk.pcap.out')
| -rw-r--r-- | tests/cfgs/default/result/dingtalk.pcap.out | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tests/cfgs/default/result/dingtalk.pcap.out b/tests/cfgs/default/result/dingtalk.pcap.out index 5ba03f4fd..13dfd0eaa 100644 --- a/tests/cfgs/default/result/dingtalk.pcap.out +++ b/tests/cfgs/default/result/dingtalk.pcap.out @@ -29,5 +29,5 @@ JA Host Stats: 1 10.215.173.1 1 - 1 TCP 10.215.173.1:49352 <-> 104.166.182.25:443 [proto: 91.431/TLS.DingTalk][IP: 0/Unknown][Encrypted][Confidence: DPI][FPC: 0/Unknown, Confidence: Unknown][DPI packets: 7][cat: Chat/9][7 pkts/897 bytes <-> 5 pkts/3701 bytes][Goodput ratio: 66/94][0.02 sec][Hostname/SNI: static.dingtalk.com][(Advertised) ALPNs: h2;http/1.1][TLS Supported Versions: GREASE;TLSv1.3;TLSv1.2;TLSv1.1;TLSv1][bytes ratio: -0.610 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/1 3/4 7/6 3/2][Pkt Len c2s/s2c min/avg/max/stddev: 40/40 128/740 552/3533 175/1396][TCP Fingerprint: 2_64_65535_b8d6cf600040/Unknown][TLSv1.3][JA3C: cd08e31494f9531f560d64c695473da9][JA4: t13d1516h2_8daaf6152771_e5627efa2ab1][JA3S: 15af977ce25de452b96affa2addb1036][Chrome][Cipher: TLS_AES_256_GCM_SHA384][Plen Bins: 25,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25] + 1 TCP 10.215.173.1:49352 <-> 104.166.182.25:443 [proto: 91.431/TLS.DingTalk][IP: 0/Unknown][Encrypted][Confidence: DPI][FPC: 0/Unknown, Confidence: Unknown][DPI packets: 7][cat: Chat/9][7 pkts/897 bytes <-> 5 pkts/3701 bytes][Goodput ratio: 66/94][0.02 sec][Hostname/SNI: static.dingtalk.com][(Advertised) ALPNs: h2;http/1.1][TLS Supported Versions: GREASE;TLSv1.3;TLSv1.2;TLSv1.1;TLSv1][bytes ratio: -0.610 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/1 3/4 7/6 3/2][Pkt Len c2s/s2c min/avg/max/stddev: 40/40 128/740 552/3533 175/1396][TCP Fingerprint: 2_64_65535_b8d6cf600040/Unknown][TLSv1.3][JA4: t13d1516h2_8daaf6152771_e5627efa2ab1][JA3S: 15af977ce25de452b96affa2addb1036][Chrome][Cipher: TLS_AES_256_GCM_SHA384][Plen Bins: 25,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25] 2 TCP 10.215.173.1:48910 <-> 47.246.133.39:443 [proto: 431/DingTalk][IP: 274/Alibaba][ClearText][Confidence: DPI][FPC: 274/Alibaba, Confidence: IP address][DPI packets: 4][cat: Chat/9][3 pkts/244 bytes <-> 1 pkts/48 bytes][Goodput ratio: 42/0][0.02 sec][TCP Fingerprint: 2_64_65535_4d202909a511/Unknown][PLAIN TEXT (android/3.0.28)][Plen Bins: 0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] |