Added testing files for EAQ, KakaoTalk, Torcedor, Meu

10 files changed, 157 insertions, 0 deletions

diff --git a/tests/pcap/EAQ.pcap b/tests/pcap/EAQ.pcap
new file mode 100644
index 000000000..c675d324d
--- /dev/null
+++ b/tests/pcap/EAQ.pcap
diff --git a/tests/pcap/KakaoTalk_chat.pcap b/tests/pcap/KakaoTalk_chat.pcap
new file mode 100644
index 000000000..516e4d6b2
--- /dev/null
+++ b/tests/pcap/KakaoTalk_chat.pcap
diff --git a/tests/pcap/KakaoTalk_talk.pcap b/tests/pcap/KakaoTalk_talk.pcap
new file mode 100644
index 000000000..86ccd1971
--- /dev/null
+++ b/tests/pcap/KakaoTalk_talk.pcap
diff --git a/tests/pcap/Meu.pcap b/tests/pcap/Meu.pcap
new file mode 100644
index 000000000..9c724928a
--- /dev/null
+++ b/tests/pcap/Meu.pcap
diff --git a/tests/pcap/Torcedor.pcap b/tests/pcap/Torcedor.pcap
new file mode 100644
index 000000000..7d7f03a1d
--- /dev/null
+++ b/tests/pcap/Torcedor.pcap
diff --git a/tests/result/EAQ.pcap.out b/tests/result/EAQ.pcap.out
new file mode 100644
index 000000000..926bc0bb3
--- /dev/null
+++ b/tests/result/EAQ.pcap.out
@@ -0,0 +1,34 @@
+Google	23	11743	2
+EAQ	174	10092	29
+
+	1	TCP 10.8.0.1:40467 <-> 173.194.119.24:80 [proto: 126/Google][14 pkts/10589 bytes][Host: www.google.com.br]
+	2	UDP 10.8.0.1:34687 <-> 200.194.141.68:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	3	UDP 10.8.0.1:36577 <-> 200.194.149.68:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	4	TCP 10.8.0.1:53497 <-> 173.194.119.48:80 [proto: 126/Google][9 pkts/1154 bytes][Host: www.google.com]
+	5	UDP 10.8.0.1:37985 <-> 200.194.129.67:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	6	UDP 10.8.0.1:39221 <-> 200.194.137.67:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	7	UDP 10.8.0.1:39185 <-> 200.194.132.67:6000 [proto: 190/EAQ][10 pkts/580 bytes]
+	8	UDP 10.8.0.1:43641 <-> 200.194.148.68:6000 [proto: 190/EAQ][10 pkts/580 bytes]
+	9	UDP 10.8.0.1:43979 <-> 200.194.132.66:6000 [proto: 190/EAQ][10 pkts/580 bytes]
+	10	UDP 10.8.0.1:48563 <-> 200.194.141.67:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	11	UDP 10.8.0.1:48890 <-> 200.185.125.226:6000 [proto: 190/EAQ][10 pkts/580 bytes]
+	12	UDP 10.8.0.1:50175 <-> 200.194.149.67:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	13	UDP 10.8.0.1:51569 <-> 200.194.148.67:6000 [proto: 190/EAQ][10 pkts/580 bytes]
+	14	UDP 10.8.0.1:53059 <-> 200.194.133.68:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	15	UDP 10.8.0.1:59959 <-> 200.194.137.68:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	16	UDP 10.8.0.1:60013 <-> 200.194.136.67:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	17	UDP 10.8.0.1:33356 <-> 200.194.149.66:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	18	UDP 10.8.0.1:36552 <-> 200.194.136.66:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	19	UDP 10.8.0.1:40058 <-> 200.194.134.67:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	20	UDP 10.8.0.1:41438 <-> 200.194.141.66:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	21	UDP 10.8.0.1:42620 <-> 200.194.148.66:6000 [proto: 190/EAQ][10 pkts/580 bytes]
+	22	UDP 10.8.0.1:43934 <-> 200.194.136.68:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	23	UDP 10.8.0.1:47346 <-> 200.194.134.66:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	24	UDP 10.8.0.1:47714 <-> 200.194.129.68:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	25	UDP 10.8.0.1:48666 <-> 200.194.129.66:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	26	UDP 10.8.0.1:52257 <-> 200.185.138.146:6000 [proto: 190/EAQ][10 pkts/580 bytes]
+	27	UDP 10.8.0.1:52726 <-> 200.194.132.68:6000 [proto: 190/EAQ][10 pkts/580 bytes]
+	28	UDP 10.8.0.1:53354 <-> 200.194.137.66:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	29	UDP 10.8.0.1:56128 <-> 200.194.133.66:6000 [proto: 190/EAQ][5 pkts/290 bytes]
+	30	UDP 10.8.0.1:57004 <-> 200.194.133.67:6000 [proto: 190/EAQ][4 pkts/232 bytes]
+	31	UDP 10.8.0.1:59098 <-> 200.194.134.68:6000 [proto: 190/EAQ][4 pkts/232 bytes]
diff --git a/tests/result/KakaoTalk_chat.pcap.out b/tests/result/KakaoTalk_chat.pcap.out
new file mode 100644
index 000000000..c3f1c87f6
--- /dev/null
+++ b/tests/result/KakaoTalk_chat.pcap.out
@@ -0,0 +1,51 @@
+Unknown	2	181	1
+DNS	2	217	1
+HTTP	15	840	2
+ICMP	1	147	1
+SSL	34	4913	5
+Facebook	211	51558	11
+Google	1	164	1
+HTTP_Proxy	26	3926	1
+KakaoTalk	55	9990	15
+
+	1	UDP 10.188.1.1:53 <-> 10.24.82.188:56820 [proto: 193/KakaoTalk][2 pkts/205 bytes][Host: up-c.talk.kakao.com]
+	2	UDP 10.188.1.1:53 <-> 10.24.82.188:57816 [proto: 193/KakaoTalk][2 pkts/244 bytes][Host: katalk.kakao.com]
+	3	UDP 10.188.1.1:53 <-> 10.24.82.188:58810 [proto: 193/KakaoTalk][2 pkts/190 bytes][Host: item.kakao.com]
+	4	TCP 10.24.82.188:34503 <-> 120.28.26.242:80 [proto: 7/HTTP][1 pkts/56 bytes]
+	5	ICMP 10.188.191.1:0 <-> 10.24.82.188:0 [proto: 81/ICMP][1 pkts/147 bytes]
+	6	UDP 10.188.1.1:53 <-> 10.24.82.188:4017 [proto: 119/Facebook][2 pkts/229 bytes][Host: developers.facebook.com]
+	7	UDP 10.188.1.1:53 <-> 10.24.82.188:5929 [proto: 193/KakaoTalk][2 pkts/205 bytes][Host: up-p.talk.kakao.com]
+	8	TCP 10.24.82.188:51021 <-> 103.246.57.251:8080 [proto: 131/HTTP_Proxy][26 pkts/3926 bytes]
+	9	TCP 210.103.240.15:443 <-> 10.24.82.188:37821 [proto: 193/KakaoTalk][27 pkts/7126 bytes][SSL server: *.kakao.com]
+	10	UDP 10.188.1.1:53 <-> 10.24.82.188:25117 [proto: 193/KakaoTalk][2 pkts/208 bytes][Host: up-gp.talk.kakao.com]
+	11	UDP 10.188.1.1:53 <-> 10.24.82.188:29029 [proto: 193/KakaoTalk][2 pkts/205 bytes][Host: up-a.talk.kakao.com]
+	12	UDP 10.188.1.1:53 <-> 10.24.82.188:35603 [proto: 193/KakaoTalk][2 pkts/215 bytes][Host: ac-talk.kakao.com]
+	13	TCP 31.13.68.84:80 <-> 10.24.82.188:37553 [proto: 119/Facebook][10 pkts/1058 bytes][Host: www.facebook.com]
+	14	TCP 31.13.68.84:80 <-> 10.24.82.188:37557 [proto: 119/Facebook][11 pkts/1114 bytes][Host: www.facebook.com]
+	15	UDP 10.188.1.1:53 <-> 10.24.82.188:41909 [proto: 193/KakaoTalk][2 pkts/214 bytes][Host: booking.loco.kakao.com]
+	16	UDP 10.188.1.1:53 <-> 10.24.82.188:43077 [proto: 193/KakaoTalk][2 pkts/178 bytes][Host: dn-l.talk.kakao.com]
+	17	UDP 10.188.1.1:53 <-> 10.24.82.188:61011 [proto: 193/KakaoTalk][2 pkts/200 bytes][Host: plus-talk.kakao.com]
+	18	UDP 10.188.191.1:53 <-> 10.24.82.188:61011 [proto: 193/KakaoTalk][2 pkts/200 bytes][Host: plus-talk.kakao.com]
+	19	TCP 10.24.82.188:58964 <-> 54.255.253.199:5223 [proto: 91/SSL][6 pkts/1890 bytes][SSL server: *.push.samsungosp.com]
+	20	UDP 10.188.1.1:53 <-> 10.24.82.188:9094 [proto: 193/KakaoTalk][2 pkts/205 bytes][Host: up-v.talk.kakao.com]
+	21	TCP 173.252.97.2:443 <-> 10.24.82.188:35503 [proto: 119/Facebook][38 pkts/7591 bytes][SSL server: *.facebook.com]
+	22	TCP 173.252.97.2:443 <-> 10.24.82.188:35511 [proto: 119/Facebook][36 pkts/7152 bytes][SSL server: *.facebook.com]
+	23	TCP 139.150.0.125:443 <-> 10.24.82.188:46947 [proto: 91/SSL][18 pkts/2409 bytes]
+	24	UDP 10.188.1.1:53 <-> 10.24.82.188:12908 [proto: 193/KakaoTalk][2 pkts/205 bytes][Host: up-m.talk.kakao.com]
+	25	TCP 173.194.72.188:5228 <-> 10.24.82.188:34686 [proto: 126/Google][1 pkts/164 bytes]
+	26	UDP 10.188.1.1:53 <-> 10.24.82.188:14650 [proto: 5/DNS][2 pkts/217 bytes][Host: 2.97.252.173.in-addr.arpa]
+	27	UDP 10.188.1.1:53 <-> 10.24.82.188:19582 [proto: 119/Facebook][2 pkts/218 bytes][Host: graph.facebook.com]
+	28	TCP 216.58.221.10:80 <-> 10.24.82.188:35922 [proto: 7/HTTP][14 pkts/784 bytes]
+	29	UDP 10.188.1.1:53 <-> 10.24.82.188:24596 [proto: 119/Facebook][2 pkts/196 bytes][Host: api.facebook.com]
+	30	TCP 210.103.240.15:443 <-> 10.24.82.188:42332 [proto: 91/SSL][5 pkts/280 bytes]
+	31	TCP 216.58.220.174:443 <-> 10.24.82.188:49217 [proto: 91/SSL][1 pkts/83 bytes]
+	32	UDP 10.188.1.1:53 <-> 10.24.82.188:38448 [proto: 193/KakaoTalk][2 pkts/190 bytes][Host: auth.kakao.com]
+	33	TCP 31.13.68.70:443 <-> 10.24.82.188:43581 [proto: 119/Facebook][34 pkts/9655 bytes][SSL client: graph.facebook.com]
+	34	TCP 31.13.68.84:443 <-> 10.24.82.188:45209 [proto: 119/Facebook][19 pkts/7707 bytes][SSL client: api.facebook.com]
+	35	TCP 31.13.68.84:443 <-> 10.24.82.188:45211 [proto: 119/Facebook][29 pkts/9077 bytes][SSL client: developers.facebook.com]
+	36	TCP 31.13.68.84:443 <-> 10.24.82.188:45213 [proto: 119/Facebook][28 pkts/7561 bytes][SSL server: *.facebook.com]
+	37	TCP 31.13.68.73:443 <-> 10.24.82.188:47007 [proto: 91/SSL][4 pkts/251 bytes]
+
+
+Undetected flows:
+	1	TCP 10.24.82.188:58927 <-> 54.255.253.199:5223 [proto: 0/Unknown][2 pkts/181 bytes]
diff --git a/tests/result/KakaoTalk_talk.pcap.out b/tests/result/KakaoTalk_talk.pcap.out
new file mode 100644
index 000000000..cc89066ea
--- /dev/null
+++ b/tests/result/KakaoTalk_talk.pcap.out
@@ -0,0 +1,34 @@
+Unknown	4	396	1
+HTTP	5	280	1
+SSL_No_Cert	74	14132	2
+RTP	2991	398751	2
+SSL	10	1517	5
+Facebook	2	197	1
+Google	2	220	2
+HTTP_Proxy	31	3565	3
+TOR	40	10538	1
+KakaoTalk_Voice	44	6196	2
+
+	1	TCP 10.24.82.188:34533 <-> 120.28.26.242:80 [proto: 7/HTTP][5 pkts/280 bytes]
+	2	TCP 10.24.82.188:38380 <-> 173.194.117.229:443 [proto: 126/Google][1 pkts/56 bytes]
+	3	TCP 10.24.82.188:51021 <-> 103.246.57.251:8080 [proto: 131/HTTP_Proxy][11 pkts/1488 bytes]
+	4	UDP 10.188.1.1:53 <-> 10.24.82.188:25223 [proto: 119/Facebook][2 pkts/197 bytes][Host: mqtt.facebook.com]
+	5	TCP 173.252.88.128:443 <-> 10.24.82.188:59912 [proto: 91/SSL][2 pkts/124 bytes]
+	6	TCP 173.252.88.128:443 <-> 10.24.82.188:59954 [proto: 64/SSL_No_Cert][29 pkts/4024 bytes]
+	7	TCP 10.24.82.188:53974 <-> 203.205.151.233:8080 [proto: 131/HTTP_Proxy][5 pkts/350 bytes]
+	8	TCP 110.76.143.50:8080 <-> 10.24.82.188:32968 [proto: 64/SSL_No_Cert][45 pkts/10108 bytes]
+	9	TCP 139.150.0.125:443 <-> 10.24.82.188:46947 [proto: 91/SSL][5 pkts/1198 bytes]
+	10	TCP 173.194.72.188:5228 <-> 10.24.82.188:34686 [proto: 126/Google][1 pkts/164 bytes]
+	11	TCP 110.76.143.50:9001 <-> 10.24.82.188:58857 [proto: 163/TOR][40 pkts/10538 bytes]
+	12	TCP 173.252.122.1:443 <-> 10.24.82.188:52123 [proto: 91/SSL][1 pkts/56 bytes]
+	13	TCP 10.24.82.188:48489 <-> 203.205.147.215:80 [proto: 131/HTTP_Proxy][15 pkts/1727 bytes][Host: hkminorshort.weixin.qq.com]
+	14	UDP 1.201.1.174:23047 <-> 10.24.82.188:10269 [proto: 194/KakaoTalk_Voice][22 pkts/3112 bytes]
+	15	UDP 1.201.1.174:23046 <-> 10.24.82.188:10268 [proto: 87/RTP][1488 pkts/198510 bytes]
+	16	UDP 1.201.1.174:23045 <-> 10.24.82.188:11321 [proto: 194/KakaoTalk_Voice][22 pkts/3084 bytes]
+	17	UDP 1.201.1.174:23044 <-> 10.24.82.188:11320 [proto: 87/RTP][1503 pkts/200241 bytes]
+	18	TCP 216.58.220.174:443 <-> 10.24.82.188:49217 [proto: 91/SSL][1 pkts/83 bytes]
+	19	TCP 216.58.220.161:443 <-> 10.24.82.188:56697 [proto: 91/SSL][1 pkts/56 bytes]
+
+
+Undetected flows:
+	1	TCP 10.24.82.188:58916 <-> 54.255.185.236:5222 [proto: 0/Unknown][4 pkts/396 bytes]
diff --git a/tests/result/Meu.pcap.out b/tests/result/Meu.pcap.out
new file mode 100644
index 000000000..660c917e9
--- /dev/null
+++ b/tests/result/Meu.pcap.out
@@ -0,0 +1,28 @@
+Meu	814	658545	26
+
+	1	TCP 10.8.0.1:55226 <-> 189.40.216.95:443 [proto: 191/Meu][62 pkts/31584 bytes][SSL client: appmeutim.tim.com.br]
+	2	TCP 10.8.0.1:55230 <-> 189.40.216.95:443 [proto: 191/Meu][27 pkts/11642 bytes][SSL client: appmeutim.tim.com.br]
+	3	TCP 10.8.0.1:55232 <-> 189.40.216.95:443 [proto: 191/Meu][37 pkts/37269 bytes][SSL client: appmeutim.tim.com.br]
+	4	TCP 10.8.0.1:55234 <-> 189.40.216.95:443 [proto: 191/Meu][21 pkts/9350 bytes][SSL client: appmeutim.tim.com.br]
+	5	TCP 10.8.0.1:55236 <-> 189.40.216.95:443 [proto: 191/Meu][13 pkts/1181 bytes][SSL client: appmeutim.tim.com.br]
+	6	TCP 10.8.0.1:55238 <-> 189.40.216.95:443 [proto: 191/Meu][13 pkts/1181 bytes][SSL client: appmeutim.tim.com.br]
+	7	TCP 10.8.0.1:55250 <-> 189.40.216.95:443 [proto: 191/Meu][22 pkts/9903 bytes][SSL client: appmeutim.tim.com.br]
+	8	TCP 10.8.0.1:55252 <-> 189.40.216.95:443 [proto: 191/Meu][34 pkts/20796 bytes][SSL client: appmeutim.tim.com.br]
+	9	TCP 10.8.0.1:55254 <-> 189.40.216.95:443 [proto: 191/Meu][27 pkts/8864 bytes][SSL client: appmeutim.tim.com.br]
+	10	TCP 10.8.0.1:55262 <-> 189.40.216.95:443 [proto: 191/Meu][15 pkts/4486 bytes][SSL client: appmeutim.tim.com.br]
+	11	TCP 10.8.0.1:55264 <-> 189.40.216.95:443 [proto: 191/Meu][15 pkts/4486 bytes][SSL client: appmeutim.tim.com.br]
+	12	TCP 10.8.0.1:55268 <-> 189.40.216.95:443 [proto: 191/Meu][26 pkts/6969 bytes][SSL client: appmeutim.tim.com.br]
+	13	TCP 10.8.0.1:55270 <-> 189.40.216.95:443 [proto: 191/Meu][56 pkts/36838 bytes][SSL client: appmeutim.tim.com.br]
+	14	TCP 10.8.0.1:55272 <-> 189.40.216.95:443 [proto: 191/Meu][53 pkts/142338 bytes][SSL client: appmeutim.tim.com.br]
+	15	TCP 10.8.0.1:55276 <-> 189.40.216.95:443 [proto: 191/Meu][20 pkts/7059 bytes][SSL client: appmeutim.tim.com.br]
+	16	TCP 10.8.0.1:55227 <-> 189.40.216.95:443 [proto: 191/Meu][41 pkts/19844 bytes][SSL client: appmeutim.tim.com.br]
+	17	TCP 10.8.0.1:55231 <-> 189.40.216.95:443 [proto: 191/Meu][33 pkts/14083 bytes][SSL client: appmeutim.tim.com.br]
+	18	TCP 10.8.0.1:55233 <-> 189.40.216.95:443 [proto: 191/Meu][96 pkts/137364 bytes][SSL client: appmeutim.tim.com.br]
+	19	TCP 10.8.0.1:55235 <-> 189.40.216.95:443 [proto: 191/Meu][19 pkts/5178 bytes][SSL client: appmeutim.tim.com.br]
+	20	TCP 10.8.0.1:55237 <-> 189.40.216.95:443 [proto: 191/Meu][13 pkts/1181 bytes][SSL client: appmeutim.tim.com.br]
+	21	TCP 10.8.0.1:55239 <-> 189.40.216.95:443 [proto: 191/Meu][85 pkts/122532 bytes][SSL client: appmeutim.tim.com.br]
+	22	TCP 10.8.0.1:55251 <-> 189.40.216.95:443 [proto: 191/Meu][20 pkts/6243 bytes][SSL client: appmeutim.tim.com.br]
+	23	TCP 10.8.0.1:55253 <-> 189.40.216.95:443 [proto: 191/Meu][15 pkts/4486 bytes][SSL client: appmeutim.tim.com.br]
+	24	TCP 10.8.0.1:55255 <-> 189.40.216.95:443 [proto: 191/Meu][17 pkts/4594 bytes][SSL client: appmeutim.tim.com.br]
+	25	TCP 10.8.0.1:55263 <-> 189.40.216.95:443 [proto: 191/Meu][15 pkts/4486 bytes][SSL client: appmeutim.tim.com.br]
+	26	TCP 10.8.0.1:55273 <-> 189.40.216.95:443 [proto: 191/Meu][19 pkts/4608 bytes][SSL client: appmeutim.tim.com.br]
diff --git a/tests/result/Torcedor.pcap.out b/tests/result/Torcedor.pcap.out
new file mode 100644
index 000000000..0c5ec9e16
--- /dev/null
+++ b/tests/result/Torcedor.pcap.out
@@ -0,0 +1,10 @@
+HTTP	4	216	1
+SSL	26	1558	2
+Torcedor	55	67338	3
+
+	1	TCP 10.8.0.1:55944 <-> 52.25.136.177:80 [proto: 192/Torcedor][7 pkts/1118 bytes][Host: usuario.timtorcedor.com.br]
+	2	TCP 10.8.0.1:53114 <-> 31.13.85.8:443 [proto: 91/SSL][4 pkts/216 bytes]
+	3	TCP 10.8.0.1:56117 <-> 52.25.136.177:80 [proto: 192/Torcedor][23 pkts/33056 bytes][Host: usuario.timtorcedor.com.br]
+	4	TCP 10.8.0.1:40016 <-> 158.85.58.105:443 [proto: 91/SSL][22 pkts/1342 bytes]
+	5	TCP 10.8.0.1:33415 <-> 187.109.32.201:80 [proto: 7/HTTP][4 pkts/216 bytes]
+	6	TCP 10.8.0.1:39422 <-> 54.149.207.220:80 [proto: 192/Torcedor][25 pkts/33164 bytes][Host: usuario.timtorcedor.com.br]