diff options
| author | 0x41CEA55 <167377970+41CEA55@users.noreply.github.com> | 2024-04-19 13:54:00 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-04-19 12:54:00 +0200 |
| commit | e75d7a620e60fd35385793f09209f8a857d4b325 (patch) | |
| tree | d84e39d7dc378b0118f13e167c5b191bf9b70def /tests/cfgs/default/result/knxip.pcapng.out | |
| parent | ad117bfaabd3bc75dc70d0ddbc4ba18c86c40dbd (diff) | |
Add KNXnet/IP protocol support (#2397)
* Add KNXnet/IP protocol support
* Improve KNXnet/IP over TCP detection
Diffstat (limited to 'tests/cfgs/default/result/knxip.pcapng.out')
| -rw-r--r-- | tests/cfgs/default/result/knxip.pcapng.out | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/tests/cfgs/default/result/knxip.pcapng.out b/tests/cfgs/default/result/knxip.pcapng.out new file mode 100644 index 000000000..4e192ddd4 --- /dev/null +++ b/tests/cfgs/default/result/knxip.pcapng.out @@ -0,0 +1,30 @@ +DPI Packets (TCP): 1 (1.00 pkts/flow) +DPI Packets (UDP): 1 (1.00 pkts/flow) +Confidence DPI : 2 (flows) +Num dissector calls: 2 (1.00 diss/flow) +LRU cache ookla: 0/0/0 (insert/search/found) +LRU cache bittorrent: 0/0/0 (insert/search/found) +LRU cache zoom: 0/0/0 (insert/search/found) +LRU cache stun: 0/0/0 (insert/search/found) +LRU cache tls_cert: 0/0/0 (insert/search/found) +LRU cache mining: 0/0/0 (insert/search/found) +LRU cache msteams: 0/0/0 (insert/search/found) +LRU cache stun_zoom: 0/0/0 (insert/search/found) +Automa host: 0/0 (search/found) +Automa domain: 0/0 (search/found) +Automa tls cert: 0/0 (search/found) +Automa risk mask: 0/0 (search/found) +Automa common alpns: 0/0 (search/found) +Patricia risk mask: 2/0 (search/found) +Patricia risk mask IPv6: 0/0 (search/found) +Patricia risk: 0/0 (search/found) +Patricia risk IPv6: 0/0 (search/found) +Patricia protocols: 4/0 (search/found) +Patricia protocols IPv6: 0/0 (search/found) + +KNXnet_IP 3 200 2 + +Acceptable 3 200 2 + + 1 UDP 192.168.88.231:41343 -> 224.0.23.12:3671 [proto: 410/KNXnet_IP][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 1][cat: IoT-Scada/31][2 pkts/118 bytes -> 0 pkts/0 bytes][Goodput ratio: 29/0][< 1 sec][Plen Bins: 100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 2 TCP 192.168.1.28:3671 -> 192.168.1.24:54445 [proto: 410/KNXnet_IP][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 1][cat: IoT-Scada/31][1 pkts/82 bytes -> 0 pkts/0 bytes][Goodput ratio: 34/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][Plen Bins: 100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] |