From 186e89a7330215da323335d2416a1e6e5acdf994 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Tue, 26 Oct 2021 13:16:23 +0200 Subject: Detect invalid characters in text and set a risk. Fixes #1347. Signed-off-by: Toni Uhlig --- tests/result/dns-invalid-chars.pcap.out | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 tests/result/dns-invalid-chars.pcap.out (limited to 'tests/result/dns-invalid-chars.pcap.out') diff --git a/tests/result/dns-invalid-chars.pcap.out b/tests/result/dns-invalid-chars.pcap.out new file mode 100644 index 000000000..97a5dcd23 --- /dev/null +++ b/tests/result/dns-invalid-chars.pcap.out @@ -0,0 +1,7 @@ +Guessed flow protos: 0 + +DPI Packets (UDP): 2 (2.00 pkts/flow) + +DNS 2 196 1 + + 1 UDP 127.0.0.1:35980 <-> 127.0.0.1:53 [proto: 5/DNS][ClearText][cat: Network/14][1 pkts/90 bytes <-> 1 pkts/106 bytes][Goodput ratio: 53/60][0.00 sec][Host: www.allyourbasesare???ongto.cn][19.185.141.241][Risk: ** Text contains non-printable characters **][Risk Score: 100][PLAIN TEXT (allyourba)][Plen Bins: 0,50,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] -- cgit v1.2.3