diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2022-01-29 09:19:26 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-01-29 09:19:26 +0100 |
| commit | 513e386959e0d52c4b37cb704f6b0b7a128cc0e4 (patch) | |
| tree | d46f9bb6b85a1b36ab846ffd150e02971c0d8fd5 /tests/result/mqtt.pcap.out | |
| parent | 9b8679a320c3c210d9e3fda2c1ee8049d2b6c79f (diff) | |
Extend protocols support (#1422)
Add detection of AccuWeather site/app and Google Classroom.
Improve detection of Azure, Zattoo, Whatsapp, MQTT and LDAP.
Fix some RX false positives.
Fix some "Uncommon TLS ALPN"-risk false positives.
Fix "confidence" value for some Zoom/Torrent classifications.
Minor fix in Lua script for Wireshark extcap.
Update .gitignore file.
Let GitHub correctly detect the language type of *.inc files.
Zattoo example has been provided by @subhajit-cdot in #1148.
Diffstat (limited to 'tests/result/mqtt.pcap.out')
| -rw-r--r-- | tests/result/mqtt.pcap.out | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/tests/result/mqtt.pcap.out b/tests/result/mqtt.pcap.out new file mode 100644 index 000000000..17e1d3a7f --- /dev/null +++ b/tests/result/mqtt.pcap.out @@ -0,0 +1,10 @@ +Guessed flow protos: 0 + +DPI Packets (TCP): 3 (1.50 pkts/flow) +Confidence DPI : 2 (flows) + +MQTT 8 1126 1 +Azure 1 355 1 + + 1 TCP 10.10.10.1:1883 <-> 192.168.0.1:41892 [proto: 222/MQTT][ClearText][Confidence: DPI][cat: RPC/16][4 pkts/370 bytes <-> 4 pkts/756 bytes][Goodput ratio: 26/65][1.69 sec][bytes ratio: -0.343 (Download)][IAT c2s/s2c min/avg/max/stddev: 79/80 261/561 618/1000 253/377][Pkt Len c2s/s2c min/avg/max/stddev: 70/68 92/189 155/458 36/157][PLAIN TEXT (bbbbbaaaaab)][Plen Bins: 42,14,28,0,0,0,0,0,0,0,0,0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 2 TCP 100.67.35.238:35035 -> 51.137.28.239:1883 [VLAN: 1008][proto: 222.276/MQTT.Azure][ClearText][Confidence: DPI][cat: RPC/16][1 pkts/355 bytes -> 0 pkts/0 bytes][Goodput ratio: 80/0][< 1 sec][PLAIN TEXT (Jiotazewpmlithub.azure)][Plen Bins: 0,0,0,0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] |