diff options
| author | lns <matzeton@googlemail.com> | 2022-06-04 17:14:06 +0200 |
|---|---|---|
| committer | lns <matzeton@googlemail.com> | 2022-06-04 17:57:56 +0200 |
| commit | c9ab5573765b605ed56b3f4781124df457ad3b52 (patch) | |
| tree | bb0a1f93626168d202b7d2f5483a26f0e5d6bd0f /tests/result/rsh-syslog-false-positive.pcap.out | |
| parent | 338427d71290a3df44c9f43b49a8609964ec63a6 (diff) | |
Added RSH dissector. Fixes #202.add/rsh
- added syslog false-positive pcap that was missing in 09fbe0a64a11b08a35435f516e9a19f7e0c20d7c
- added NDPI_ARRAY_LENGTH() macro, usable on `type var[]` declarations
Signed-off-by: lns <matzeton@googlemail.com>
Diffstat (limited to 'tests/result/rsh-syslog-false-positive.pcap.out')
| -rw-r--r-- | tests/result/rsh-syslog-false-positive.pcap.out | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/tests/result/rsh-syslog-false-positive.pcap.out b/tests/result/rsh-syslog-false-positive.pcap.out new file mode 100644 index 000000000..a8c44d323 --- /dev/null +++ b/tests/result/rsh-syslog-false-positive.pcap.out @@ -0,0 +1,8 @@ +Guessed flow protos: 0 + +DPI Packets (TCP): 6 (6.00 pkts/flow) +Confidence DPI : 1 (flows) + +RSH 6 3335 1 + + 1 TCP 172.31.78.129:9039 -> 172.29.43.201:514 [proto: 294/RSH][ClearText][Confidence: DPI][cat: RemoteAccess/12][6 pkts/3335 bytes -> 0 pkts/0 bytes][Goodput ratio: 91/0][0.08 sec][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 11/0 16/0 26/0 6/0][Pkt Len c2s/s2c min/avg/max/stddev: 292/0 556/0 844/0 212/0][Risk: ** Unsafe Protocol **][Risk Score: 10][PLAIN TEXT (52.926451)][Plen Bins: 0,0,0,0,0,0,0,34,0,0,0,0,0,16,0,0,0,0,16,0,0,16,0,0,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] |