diff options
| -rw-r--r-- | src/lib/ndpi_content_match.c.inc | 1 | ||||
| -rw-r--r-- | tests/pcap/exe_download.pcap | bin | 0 -> 728735 bytes | |||
| -rw-r--r-- | tests/pcap/exe_download_as_png.pcap | bin | 0 -> 538017 bytes | |||
| -rw-r--r-- | tests/result/exe_download.pcap.out | 3 | ||||
| -rw-r--r-- | tests/result/exe_download_as_png.pcap.out | 3 |
5 files changed, 7 insertions, 0 deletions
diff --git a/src/lib/ndpi_content_match.c.inc b/src/lib/ndpi_content_match.c.inc index 2fce2d03a..5924ddad7 100644 --- a/src/lib/ndpi_content_match.c.inc +++ b/src/lib/ndpi_content_match.c.inc @@ -932,6 +932,7 @@ static ndpi_network host_protocol_list[] = { { 0xD873D000 /* 216.115.208.0 */, 20, NDPI_PROTOCOL_CITRIX }, { 0xD8DB7000 /* 216.219.112.0 */, 20, NDPI_PROTOCOL_CITRIX }, + { 0xAD630000 /* 173.99.0.0 */, 18, NDPI_PROTOCOL_CITRIX }, /* Cisco Webex LLC diff --git a/tests/pcap/exe_download.pcap b/tests/pcap/exe_download.pcap Binary files differnew file mode 100644 index 000000000..64d97f5ea --- /dev/null +++ b/tests/pcap/exe_download.pcap diff --git a/tests/pcap/exe_download_as_png.pcap b/tests/pcap/exe_download_as_png.pcap Binary files differnew file mode 100644 index 000000000..36f81e241 --- /dev/null +++ b/tests/pcap/exe_download_as_png.pcap diff --git a/tests/result/exe_download.pcap.out b/tests/result/exe_download.pcap.out new file mode 100644 index 000000000..cfb74a3d3 --- /dev/null +++ b/tests/result/exe_download.pcap.out @@ -0,0 +1,3 @@ +HTTP 703 717463 1 + + 1 TCP 10.9.25.101:49165 <-> 144.91.69.195:80 [proto: 7/HTTP][cat: Download-FileTransfer-FileSharing/7][203 pkts/11127 bytes <-> 500 pkts/706336 bytes][Goodput ratio: 1/96][5.18 sec][Host: 144.91.69.195][bytes ratio: -0.969 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 23/9 319/365 49/37][Pkt Len c2s/s2c min/avg/max/stddev: 54/54 55/1413 207/1514 11/134][URL: 144.91.69.195/solar.php[StatusCode: 200][ContentType: application/octet-stream][UserAgent: pwtyyEKzNtGatwnJjmCcBLbOveCVpc][Risk: ** Binary application transfer **][PLAIN TEXT (GET /solar.php HTTP/1.1)] diff --git a/tests/result/exe_download_as_png.pcap.out b/tests/result/exe_download_as_png.pcap.out new file mode 100644 index 000000000..5b05d5d14 --- /dev/null +++ b/tests/result/exe_download_as_png.pcap.out @@ -0,0 +1,3 @@ +HTTP 534 529449 1 + + 1 TCP 10.9.25.101:49197 <-> 185.98.87.185:80 [proto: 7/HTTP][cat: Web/5][163 pkts/9113 bytes <-> 371 pkts/520336 bytes][Goodput ratio: 3/96][69.52 sec][Host: 185.98.87.185][bytes ratio: -0.966 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 623/25 60010/4824 5733/276][Pkt Len c2s/s2c min/avg/max/stddev: 54/54 56/1403 204/1514 16/164][URL: 185.98.87.185/tablone.png[StatusCode: 200][ContentType: image/png][UserAgent: WinHTTP loader/1.0][Risk: ** Binary application transfer **][PLAIN TEXT (GET /tablone.png HTTP/1.1)] |