diff options
| author | lns <matzeton@googlemail.com> | 2022-05-08 19:09:55 +0200 |
|---|---|---|
| committer | lns <matzeton@googlemail.com> | 2022-05-08 19:11:08 +0200 |
| commit | 06f1fb23e0d006d49a021e1e27d84a508a9c02e9 (patch) | |
| tree | fb59ec1f5a9b92ef55fa017a627ee81c94bd9b0c /tests/result/tls-appdata.pcap.out | |
| parent | b2648a45a377fb891319e59e2aa94729705c6c2a (diff) | |
Improved TLS application data detection.improved/tls-appdata-detection-the-second
* #1532 did fx TLS appdata detection only partially
* use flow->l4.tcp.tls.message.buffer_used instead of packet->payload
Signed-off-by: lns <matzeton@googlemail.com>
Diffstat (limited to 'tests/result/tls-appdata.pcap.out')
| -rw-r--r-- | tests/result/tls-appdata.pcap.out | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/tests/result/tls-appdata.pcap.out b/tests/result/tls-appdata.pcap.out index ffc94e0fb..ae356b073 100644 --- a/tests/result/tls-appdata.pcap.out +++ b/tests/result/tls-appdata.pcap.out @@ -1,8 +1,10 @@ Guessed flow protos: 1 -DPI Packets (TCP): 6 (6.00 pkts/flow) -Confidence DPI : 1 (flows) +DPI Packets (TCP): 87 (43.50 pkts/flow) +Confidence DPI : 2 (flows) Facebook 6 789 1 +Twitch 114 119156 1 - 1 TCP 179.60.195.173:443 <-> 192.168.2.100:60636 [proto: 91.119/TLS.Facebook][Encrypted][Confidence: DPI][cat: SocialNetwork/6][3 pkts/627 bytes <-> 3 pkts/162 bytes][Goodput ratio: 68/0][0.22 sec][bytes ratio: 0.589 (Upload)][IAT c2s/s2c min/avg/max/stddev: 11/0 56/0 101/0 45/0][Pkt Len c2s/s2c min/avg/max/stddev: 201/54 209/54 225/54 11/0][Plen Bins: 0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 1 TCP 192.168.2.100:58976 <-> 52.223.198.7:443 [proto: 91.195/TLS.Twitch][Encrypted][Confidence: DPI][cat: Video/26][65 pkts/15286 bytes <-> 49 pkts/103870 bytes][Goodput ratio: 77/97][4470.16 sec][bytes ratio: -0.743 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 86847/10887 1637911/4294921408 325792/696728256][Pkt Len c2s/s2c min/avg/max/stddev: 54/60 235/2120 1506/2958 476/1092][Plen Bins: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,33,0,51] + 2 TCP 179.60.195.173:443 <-> 192.168.2.100:60636 [proto: 91.119/TLS.Facebook][Encrypted][Confidence: DPI][cat: SocialNetwork/6][3 pkts/627 bytes <-> 3 pkts/162 bytes][Goodput ratio: 68/0][0.22 sec][bytes ratio: 0.589 (Upload)][IAT c2s/s2c min/avg/max/stddev: 11/0 56/0 101/0 45/0][Pkt Len c2s/s2c min/avg/max/stddev: 201/54 209/54 225/54 11/0][Plen Bins: 0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] |