From 06f1fb23e0d006d49a021e1e27d84a508a9c02e9 Mon Sep 17 00:00:00 2001 From: lns Date: Sun, 8 May 2022 19:09:55 +0200 Subject: Improved TLS application data detection. * #1532 did fx TLS appdata detection only partially * use flow->l4.tcp.tls.message.buffer_used instead of packet->payload Signed-off-by: lns --- tests/result/whatsapp_login_call.pcap.out | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'tests/result/whatsapp_login_call.pcap.out') diff --git a/tests/result/whatsapp_login_call.pcap.out b/tests/result/whatsapp_login_call.pcap.out index 8efea73db..4c7d1aecb 100644 --- a/tests/result/whatsapp_login_call.pcap.out +++ b/tests/result/whatsapp_login_call.pcap.out @@ -1,6 +1,6 @@ Guessed flow protos: 23 -DPI Packets (TCP): 169 (6.26 pkts/flow) +DPI Packets (TCP): 167 (6.19 pkts/flow) DPI Packets (UDP): 35 (1.21 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by port : 5 (flows) -- cgit v1.2.3