diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2021-07-13 12:28:39 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-07-13 12:28:39 +0200 |
| commit | cccf794265dee24f25e16f21753972b20f7593c5 (patch) | |
| tree | eacc03e4e831ff7be5a0372c6e7cbbf386affeb3 /tests/result/bad-dns-traffic.pcap.out | |
| parent | 96b71def49e46c7fbc7ba5fae3f355eb7d90151b (diff) | |
ndpiReader: add statistics about nDPI performance (#1240)
The goal is to have a (roughly) idea about how many packets nDPI needs
to properly classify a flow.
Log this information (and guessed flows number too) during unit tests,
to keep track of improvements/regressions across commits.
Diffstat (limited to 'tests/result/bad-dns-traffic.pcap.out')
| -rw-r--r-- | tests/result/bad-dns-traffic.pcap.out | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/tests/result/bad-dns-traffic.pcap.out b/tests/result/bad-dns-traffic.pcap.out index e6dcbbc90..b49950dde 100644 --- a/tests/result/bad-dns-traffic.pcap.out +++ b/tests/result/bad-dns-traffic.pcap.out @@ -1,3 +1,7 @@ +Guessed flow protos: 0 + +DPI Packets (UDP): 11 (3.67 pkts/flow) + DNS 382 99374 3 1 UDP 192.168.43.91:56354 <-> 4.2.2.4:53 [proto: 5/DNS][cat: Network/14][203 pkts/51588 bytes <-> 146 pkts/43285 bytes][Goodput ratio: 83/86][92.47 sec][Host: c75900fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org][::][bytes ratio: 0.088 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 6/15 482/284 1046/2080 456/471][Pkt Len c2s/s2c min/avg/max/stddev: 95/95 254/296 290/325 74/65][Risk: ** Suspicious DGA domain name **][Risk Score: 100][PLAIN TEXT (8244300)][Plen Bins: 0,5,5,0,0,0,0,50,39,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] |