diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2025-01-12 13:24:27 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-01-12 13:24:27 +0100 |
| commit | 72fd94030142d277d969d1a9cff6e9c4d760cdbb (patch) | |
| tree | eae6c79d6e57698efe3d418d1f394d9fde7906ba /tests/cfgs/default/result/discord.pcap.out | |
| parent | 5c0143ce58c86fc678c5fdc7aae859fbd8a67a9f (diff) | |
Remove JA3C output from ndpiReader (#2667)
Removing JA3C is an big task. Let's start with a simple change having an
huge impact on unit tests: remove printing of JA3C information from
ndpiReader.
This way, when we will delete the actual code, the unit tests diffs
should be a lot simpler to look at.
Note that the information if the client/server cipher is weak or
obsolete is still available via flow risk
See: #2551
Diffstat (limited to 'tests/cfgs/default/result/discord.pcap.out')
| -rw-r--r-- | tests/cfgs/default/result/discord.pcap.out | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tests/cfgs/default/result/discord.pcap.out b/tests/cfgs/default/result/discord.pcap.out index c24a4154c..e1a63fd65 100644 --- a/tests/cfgs/default/result/discord.pcap.out +++ b/tests/cfgs/default/result/discord.pcap.out @@ -38,7 +38,7 @@ JA Host Stats: 6 UDP 192.168.2.100:55432 <-> 66.22.196.173:50004 [proto: 58/Discord][IP: 58/Discord][Encrypted][Confidence: DPI][FPC: 58/Discord, Confidence: IP address][DPI packets: 2][cat: Collaborative/15][13 pkts/3740 bytes <-> 2 pkts/176 bytes][Goodput ratio: 85/46][0.24 sec][Client IP: 84.59.132.100][bytes ratio: 0.910 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 19/0 28/0 7/0][Pkt Len c2s/s2c min/avg/max/stddev: 50/60 288/88 344/116 89/28][PLAIN TEXT (84.59.132.100)][Plen Bins: 13,0,13,0,0,0,0,0,53,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 7 UDP 192.168.2.100:50199 <-> 66.22.196.173:50004 [proto: 58/Discord][IP: 58/Discord][Encrypted][Confidence: DPI][FPC: 58/Discord, Confidence: IP address][DPI packets: 2][cat: Collaborative/15][8 pkts/2097 bytes <-> 7 pkts/1791 bytes][Goodput ratio: 84/83][0.15 sec][Client IP: 84.59.132.100][bytes ratio: 0.079 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 18/3 23/21 42/42 9/13][Pkt Len c2s/s2c min/avg/max/stddev: 50/60 262/256 333/323 105/107][PLAIN TEXT (84.59.132.100)][Plen Bins: 13,0,13,0,0,0,0,0,60,13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 8 UDP 192.168.2.100:63362 <-> 66.22.196.173:50004 [proto: 58/Discord][IP: 58/Discord][Encrypted][Confidence: DPI][FPC: 58/Discord, Confidence: IP address][DPI packets: 2][cat: Collaborative/15][12 pkts/3349 bytes <-> 3 pkts/499 bytes][Goodput ratio: 85/73][0.23 sec][Client IP: 84.59.132.100][bytes ratio: 0.741 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/31 21/31 53/31 12/0][Pkt Len c2s/s2c min/avg/max/stddev: 50/60 279/166 340/323 90/113][PLAIN TEXT (84.59.132.100)][Plen Bins: 13,0,13,0,0,0,0,6,33,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] - 9 TCP 10.0.2.15:42834 <-> 162.159.128.233:443 [proto: 91.58/TLS.Discord][IP: 220/Cloudflare][Encrypted][Confidence: DPI][FPC: 220/Cloudflare, Confidence: IP address][DPI packets: 5][cat: Collaborative/15][3 pkts/451 bytes <-> 4 pkts/3257 bytes][Goodput ratio: 60/93][0.05 sec][Hostname/SNI: discord.com][(Advertised) ALPNs: h2;http/1.1][(Negotiated) ALPN: h2][bytes ratio: -0.757 (Download)][IAT c2s/s2c min/avg/max/stddev: 16/0 20/13 23/22 4/9][Pkt Len c2s/s2c min/avg/max/stddev: 74/58 150/814 230/1506 64/609][Risk: ** TLS Cert Expired **][Risk Score: 100][Risk Info: 19/Jan/2021 00:00:00 - 18/Jan/2022 23:59:59][TCP Fingerprint: 2_64_64240_2e3cee914fc1/Linux][TLSv1.2][JA3C: 6f5e62edfa5933b1332ddf8b9fb3ef9d][JA4: t12d1209h2_d34a8e72043a_b39be8c56a14][ServerNames: discord.com,sni.cloudflaressl.com,*.discord.com][JA3S: 9ebc57def2efb523f25c77af13aa6d48][Issuer: C=US, O=Cloudflare, Inc., CN=Cloudflare Inc ECC CA-3][Subject: C=US, ST=CA, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com][Certificate SHA-1: 31:3B:70:94:D5:DF:90:78:9C:A0:74:26:20:24:E4:3D:92:A7:57:9D][Safari][Validity: 2021-01-19 00:00:00 - 2022-01-18 23:59:59][Cipher: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256][Plen Bins: 0,0,20,0,0,20,0,0,0,0,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,0,0,0,0,0,20,0,0] + 9 TCP 10.0.2.15:42834 <-> 162.159.128.233:443 [proto: 91.58/TLS.Discord][IP: 220/Cloudflare][Encrypted][Confidence: DPI][FPC: 220/Cloudflare, Confidence: IP address][DPI packets: 5][cat: Collaborative/15][3 pkts/451 bytes <-> 4 pkts/3257 bytes][Goodput ratio: 60/93][0.05 sec][Hostname/SNI: discord.com][(Advertised) ALPNs: h2;http/1.1][(Negotiated) ALPN: h2][bytes ratio: -0.757 (Download)][IAT c2s/s2c min/avg/max/stddev: 16/0 20/13 23/22 4/9][Pkt Len c2s/s2c min/avg/max/stddev: 74/58 150/814 230/1506 64/609][Risk: ** TLS Cert Expired **][Risk Score: 100][Risk Info: 19/Jan/2021 00:00:00 - 18/Jan/2022 23:59:59][TCP Fingerprint: 2_64_64240_2e3cee914fc1/Linux][TLSv1.2][JA4: t12d1209h2_d34a8e72043a_b39be8c56a14][ServerNames: discord.com,sni.cloudflaressl.com,*.discord.com][JA3S: 9ebc57def2efb523f25c77af13aa6d48][Issuer: C=US, O=Cloudflare, Inc., CN=Cloudflare Inc ECC CA-3][Subject: C=US, ST=CA, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com][Certificate SHA-1: 31:3B:70:94:D5:DF:90:78:9C:A0:74:26:20:24:E4:3D:92:A7:57:9D][Safari][Validity: 2021-01-19 00:00:00 - 2022-01-18 23:59:59][Cipher: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256][Plen Bins: 0,0,20,0,0,20,0,0,0,0,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,0,0,0,0,0,20,0,0] 10 UDP 192.168.2.100:65053 <-> 66.22.196.173:50004 [proto: 58/Discord][IP: 58/Discord][Encrypted][Confidence: DPI][FPC: 58/Discord, Confidence: IP address][DPI packets: 2][cat: Collaborative/15][3 pkts/236 bytes <-> 12 pkts/3448 bytes][Goodput ratio: 46/85][0.61 sec][Client IP: 84.59.132.100][bytes ratio: -0.872 (Download)][IAT c2s/s2c min/avg/max/stddev: 151/14 196/56 242/241 46/75][Pkt Len c2s/s2c min/avg/max/stddev: 50/60 79/287 116/448 28/97][PLAIN TEXT (84.59.132.100)][Plen Bins: 20,0,13,0,0,0,0,0,60,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 11 UDP 192.168.2.100:52323 <-> 66.22.196.173:50004 [proto: 58/Discord][IP: 58/Discord][Encrypted][Confidence: DPI][FPC: 58/Discord, Confidence: IP address][DPI packets: 2][cat: Collaborative/15][3 pkts/260 bytes <-> 12 pkts/3416 bytes][Goodput ratio: 51/85][0.90 sec][Client IP: 84.59.132.100][bytes ratio: -0.859 (Download)][IAT c2s/s2c min/avg/max/stddev: 229/11 341/84 453/463 112/140][Pkt Len c2s/s2c min/avg/max/stddev: 50/60 87/285 116/343 27/89][PLAIN TEXT (84.59.132.100)][Plen Bins: 13,6,13,0,0,0,0,0,61,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 12 UDP 192.168.2.100:53459 <-> 66.22.196.173:50004 [proto: 58/Discord][IP: 58/Discord][Encrypted][Confidence: DPI][FPC: 58/Discord, Confidence: IP address][DPI packets: 2][cat: Collaborative/15][3 pkts/268 bytes <-> 12 pkts/3406 bytes][Goodput ratio: 53/85][1.83 sec][Client IP: 84.59.132.100][bytes ratio: -0.854 (Download)][IAT c2s/s2c min/avg/max/stddev: 125/13 806/177 1486/1498 680/441][Pkt Len c2s/s2c min/avg/max/stddev: 50/60 89/284 116/323 28/88][PLAIN TEXT (84.59.132.100)][Plen Bins: 13,6,13,0,0,0,0,0,67,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] |