bump libnDPI to 9185c2ccc402d3368fc28ac90ab281b4f951719e

 * incorporated API changes from 41eef9246c6a3055e3876e3dd7aeaadecb4b76c0

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

21 files changed, 47 insertions, 163 deletions

diff --git a/test/results/flow-captured/default/bfd.pcap.out b/test/results/flow-captured/default/bfd.pcap.out
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/test/results/flow-captured/default/bfd.pcap.out
diff --git a/test/results/flow-captured/default/c1222.pcapng.out b/test/results/flow-captured/default/c1222.pcapng.out
new file mode 100644
index 000000000..8b5d392c6
--- /dev/null
+++ b/test/results/flow-captured/default/c1222.pcapng.out
@@ -0,0 +1 @@
+Flow 2 midstream: tcp 192.168.1.101:1577 -> 192.168.100.124:1153
diff --git a/test/results/flow-captured/default/dlep.pcapng.out b/test/results/flow-captured/default/dlep.pcapng.out
new file mode 100644
index 000000000..a99cd40ff
--- /dev/null
+++ b/test/results/flow-captured/default/dlep.pcapng.out
@@ -0,0 +1 @@
+Flow 3 midstream: tcp 10.0.0.1:51762 -> 10.0.0.2:854
diff --git a/test/results/flow-captured/default/dotenv.pcap.out b/test/results/flow-captured/default/dotenv.pcap.out
new file mode 100644
index 000000000..68a4692d0
--- /dev/null
+++ b/test/results/flow-captured/default/dotenv.pcap.out
@@ -0,0 +1 @@
+Flow 1 risky: tcp 192.168.2.198:51327 -> 89.31.76.10:80
diff --git a/test/results/flow-captured/default/flute.pcapng.out b/test/results/flow-captured/default/flute.pcapng.out
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/test/results/flow-captured/default/flute.pcapng.out
diff --git a/test/results/flow-captured/default/gaijin_mobile_mixed.pcap.out b/test/results/flow-captured/default/gaijin_mobile_mixed.pcap.out
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/test/results/flow-captured/default/gaijin_mobile_mixed.pcap.out
diff --git a/test/results/flow-captured/default/gaijin_warthunder.pcap.out b/test/results/flow-captured/default/gaijin_warthunder.pcap.out
new file mode 100644
index 000000000..c764ee911
--- /dev/null
+++ b/test/results/flow-captured/default/gaijin_warthunder.pcap.out
@@ -0,0 +1 @@
+Flow 1 risky: udp 192.168.88.231:36929 -> 185.253.20.249:20021
diff --git a/test/results/flow-captured/default/gre.pcapng.out b/test/results/flow-captured/default/gre.pcapng.out
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/test/results/flow-captured/default/gre.pcapng.out
diff --git a/test/results/flow-captured/default/lol_wild_rift_udp.pcap.out b/test/results/flow-captured/default/lol_wild_rift_udp.pcap.out
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/test/results/flow-captured/default/lol_wild_rift_udp.pcap.out
diff --git a/test/results/flow-captured/default/netease_games.pcapng.out b/test/results/flow-captured/default/netease_games.pcapng.out
new file mode 100644
index 000000000..30bd2a758
--- /dev/null
+++ b/test/results/flow-captured/default/netease_games.pcapng.out
@@ -0,0 +1 @@
+Flow 1 risky: udp 192.168.88.231:49377 -> 172.17.8.75:53
diff --git a/test/results/flow-captured/default/path_of_exile.pcapng.out b/test/results/flow-captured/default/path_of_exile.pcapng.out
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/test/results/flow-captured/default/path_of_exile.pcapng.out
diff --git a/test/results/flow-captured/default/pfcp.pcapng.out b/test/results/flow-captured/default/pfcp.pcapng.out
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/test/results/flow-captured/default/pfcp.pcapng.out
diff --git a/test/results/flow-captured/default/skype.pcap.out b/test/results/flow-captured/default/skype.pcap.out
deleted file mode 100644
index 7874738d9..000000000
--- a/test/results/flow-captured/default/skype.pcap.out
+++ /dev/null
@@ -1,90 +0,0 @@
-Flow 15 risky: tcp 192.168.1.34:50028 -> 157.56.126.211:443
-Flow 4 risky: udp 192.168.1.34:52850 -> 192.168.1.1:53
-Flow 6 risky: udp 192.168.1.34:65426 -> 192.168.1.1:53
-Flow 14 risky: udp 192.168.1.34:57288 -> 192.168.1.1:53
-Flow 1 risky: udp 192.168.1.34:49163 -> 192.168.1.1:53
-Flow 2 risky: udp 192.168.1.34:57406 -> 192.168.1.1:53
-Flow 21 risky: udp 192.168.1.34:57726 -> 192.168.1.1:53
-Flow 3 risky: udp 192.168.1.34:55711 -> 192.168.1.1:53
-Flow 10 risky: udp 192.168.1.34:49793 -> 192.168.1.1:53
-Flow 16 risky: udp 192.168.1.34:49903 -> 192.168.1.1:53
-Flow 13 risky: udp 192.168.1.34:49990 -> 192.168.1.1:53
-Flow 20 risky: udp 192.168.1.34:60288 -> 192.168.1.1:53
-Flow 5 risky: udp 192.168.1.34:54396 -> 192.168.1.1:53
-Flow 11 risky: udp 192.168.1.34:65045 -> 192.168.1.1:53
-Flow 260 risky: tcp 192.168.1.34:50128 -> 17.172.100.36:443
-Flow 150 risky: udp 192.168.1.34:63108 -> 192.168.1.1:53
-Flow 149 risky: udp 192.168.1.34:55159 -> 192.168.1.1:53
-Flow 158 risky: udp 192.168.1.34:49360 -> 192.168.1.1:53
-Flow 176 risky: udp 192.168.1.34:58368 -> 192.168.1.1:53
-Flow 175 risky: udp 192.168.1.34:54343 -> 192.168.1.1:53
-Flow 157 risky: udp 192.168.1.34:58458 -> 192.168.1.1:53
-Flow 267 risky: udp 192.168.1.34:63421 -> 192.168.1.1:53
-Flow 265 risky: udp 192.168.1.34:51802 -> 192.168.1.1:53
-Flow 263 risky: udp 192.168.1.34:56387 -> 192.168.1.1:53
-Flow 264 risky: udp 192.168.1.34:52714 -> 192.168.1.1:53
-Flow 262 risky: udp 192.168.1.34:52742 -> 192.168.1.1:53
-Flow 268 risky: udp 192.168.1.34:65037 -> 192.168.1.1:53
-Flow 9 not-detected: tcp 192.168.1.34:50026 -> 65.55.223.33:40002
-Flow 50 not-detected: tcp 192.168.1.34:50033 -> 157.55.56.170:40015
-Flow 51 not-detected: tcp 192.168.1.34:50034 -> 157.55.130.140:40033
-Flow 221 not-detected: tcp 192.168.1.34:50098 -> 65.55.223.15:40026
-Flow 101 not-detected: tcp 192.168.1.34:50046 -> 157.55.130.150:40011
-Flow 134 not-detected: tcp 192.168.1.34:50054 -> 157.55.130.153:40005
-Flow 113 not-detected: tcp 192.168.1.34:50049 -> 157.55.130.166:40021
-Flow 87 not-detected: tcp 192.168.1.34:50044 -> 157.55.130.167:40031
-Flow 194 not-detected: tcp 192.168.1.34:50074 -> 157.55.130.173:40003
-Flow 133 not-detected: tcp 192.168.1.34:50053 -> 157.55.56.146:40030
-Flow 177 not-detected: tcp 192.168.1.34:50070 -> 157.55.130.170:40018
-Flow 196 not-detected: tcp 192.168.1.34:50076 -> 157.55.235.156:40014
-Flow 168 not-detected: tcp 192.168.1.34:50067 -> 157.55.56.160:40027
-Flow 200 not-detected: tcp 192.168.1.34:50077 -> 157.55.130.176:40022
-Flow 217 not-detected: tcp 192.168.1.34:50092 -> 157.55.130.155:40020
-Flow 57 not-detected: tcp 192.168.1.34:50035 -> 213.199.179.175:40021
-Flow 220 not-detected: tcp 192.168.1.34:50097 -> 157.55.235.176:40022
-Flow 288 not-detected: tcp 192.168.1.34:50143 -> 78.202.226.115:29059
-Flow 289 not-detected: tcp 192.168.1.34:50144 -> 78.202.226.115:29059
-Flow 195 not-detected: tcp 192.168.1.34:50075 -> 213.199.179.142:40003
-Flow 49 not-detected: tcp 192.168.1.34:50032 -> 157.56.52.44:40032
-Flow 227 not-detected: tcp 192.168.1.34:50108 -> 157.56.52.28:40009
-Flow 266 not-detected: tcp 192.168.1.34:50130 -> 212.161.8.36:13392
-Flow 269 risky: tcp 192.168.1.34:50131 -> 212.161.8.36:13392
-Flow 243 not-detected: tcp 192.168.1.34:50112 -> 76.167.161.6:20274
-Flow 280 not-detected: tcp 192.168.1.34:50135 -> 76.167.161.6:20274
-Flow 232 not-detected: tcp 192.168.1.34:50109 -> 91.190.216.125:12350
-Flow 233 not-detected: tcp 192.168.1.34:50110 -> 91.190.216.125:12350
-Flow 285 not-detected: tcp 192.168.1.34:50140 -> 76.167.161.6:20274
-Flow 256 not-detected: tcp 192.168.1.34:50125 -> 91.190.218.125:12350
-Flow 257 not-detected: tcp 192.168.1.34:50126 -> 91.190.216.23:12350
-Flow 261 not-detected: tcp 192.168.1.34:50129 -> 91.190.218.125:12350
-Flow 23 midstream: tcp 108.160.170.46:443 -> 192.168.1.34:49445
-Flow 244 not-detected: tcp 192.168.1.34:50113 -> 71.238.7.203:18767
-Flow 253 not-detected: tcp 192.168.1.34:50123 -> 80.14.46.121:4415
-Flow 248 not-detected: tcp 192.168.1.34:50117 -> 71.238.7.203:18767
-Flow 258 not-detected: tcp 192.168.1.34:50127 -> 80.14.46.121:4415
-Flow 286 not-detected: tcp 192.168.1.34:50141 -> 80.14.46.121:4415
-Flow 287 not-detected: tcp 192.168.1.34:50142 -> 80.14.46.121:4415
-Flow 281 not-detected: tcp 192.168.1.34:50136 -> 71.238.7.203:18767
-Flow 283 not-detected: tcp 192.168.1.34:50138 -> 71.238.7.203:18767
-Flow 247 not-detected: tcp 192.168.1.34:50116 -> 81.83.77.141:17639
-Flow 246 not-detected: tcp 192.168.1.34:50115 -> 86.31.35.30:59621
-Flow 251 not-detected: tcp 192.168.1.34:50121 -> 81.83.77.141:17639
-Flow 250 not-detected: tcp 192.168.1.34:50119 -> 86.31.35.30:59621
-Flow 222 not-detected: tcp 192.168.1.34:50099 -> 64.4.23.166:40022
-Flow 213 not-detected: tcp 192.168.1.34:50088 -> 157.55.235.146:33033
-Flow 255 risky: tcp 17.143.160.22:5223 -> 192.168.1.34:49447
-Flow 255 midstream: tcp 17.143.160.22:5223 -> 192.168.1.34:49447
-Flow 277 not-detected: tcp 192.168.1.34:50134 -> 157.56.53.47:12350
-Flow 291 not-detected: tcp 192.168.1.34:50145 -> 157.56.53.51:12350
-Flow 245 not-detected: tcp 192.168.1.34:50114 -> 5.248.186.221:31010
-Flow 249 not-detected: tcp 192.168.1.34:50118 -> 5.248.186.221:31010
-Flow 282 not-detected: tcp 192.168.1.34:50137 -> 5.248.186.221:31010
-Flow 284 not-detected: tcp 192.168.1.34:50139 -> 5.248.186.221:31010
-Flow 144 not-detected: tcp 192.168.1.34:50059 -> 111.221.74.38:40015
-Flow 135 not-detected: tcp 192.168.1.34:50055 -> 111.221.74.47:40030
-Flow 211 not-detected: tcp 192.168.1.34:50086 -> 111.221.77.142:40023
-Flow 219 not-detected: tcp 192.168.1.34:50096 -> 111.221.74.46:40027
-Flow 270 not-detected: tcp 192.168.1.34:50132 -> 149.13.32.15:13392
-Flow 252 not-detected: tcp 192.168.1.34:50122 -> 81.133.19.185:44431
-Flow 254 not-detected: tcp 192.168.1.34:50124 -> 81.133.19.185:44431
-Flow 161 not-detected: tcp 192.168.1.34:50065 -> 65.55.223.12:40031
diff --git a/test/results/flow-captured/default/skype_no_unknown.pcap.out b/test/results/flow-captured/default/skype_no_unknown.pcap.out
deleted file mode 100644
index 09c084354..000000000
--- a/test/results/flow-captured/default/skype_no_unknown.pcap.out
+++ /dev/null
@@ -1,71 +0,0 @@
-Flow 13 risky: tcp 192.168.1.34:51230 -> 157.56.126.211:443
-Flow 23 risky: tcp 192.168.1.34:51227 -> 17.172.100.36:443
-Flow 23 midstream: tcp 192.168.1.34:51227 -> 17.172.100.36:443
-Flow 12 risky: udp 192.168.1.34:59113 -> 192.168.1.1:53
-Flow 2 risky: udp 192.168.1.34:55028 -> 192.168.1.1:53
-Flow 16 risky: udp 192.168.1.34:63514 -> 192.168.1.1:53
-Flow 15 risky: udp 192.168.1.34:53372 -> 192.168.1.1:53
-Flow 14 risky: udp 192.168.1.34:57592 -> 192.168.1.1:53
-Flow 21 risky: udp 192.168.1.34:51753 -> 192.168.1.1:53
-Flow 7 risky: udp 192.168.1.34:49864 -> 192.168.1.1:53
-Flow 6 risky: udp 192.168.1.34:64240 -> 192.168.1.1:53
-Flow 20 risky: udp 192.168.1.34:50055 -> 192.168.1.1:53
-Flow 5 risky: udp 192.168.1.34:58631 -> 192.168.1.1:53
-Flow 4 risky: udp 192.168.1.34:60688 -> 192.168.1.1:53
-Flow 11 risky: udp 192.168.1.34:62875 -> 192.168.1.1:53
-Flow 3 risky: udp 192.168.1.34:64971 -> 192.168.1.1:53
-Flow 26 risky: udp 192.168.1.34:138 -> 192.168.1.255:138
-Flow 27 risky: udp 192.168.1.1:138 -> 192.168.1.34:138
-Flow 29 risky: udp 192.168.1.92:138 -> 192.168.1.255:138
-Flow 166 risky: udp 192.168.1.34:61095 -> 192.168.1.1:53
-Flow 235 not-detected: tcp 192.168.1.34:51289 -> 71.238.7.203:18767
-Flow 240 not-detected: tcp 192.168.1.34:51292 -> 71.238.7.203:18767
-Flow 155 risky: udp 192.168.1.34:63342 -> 192.168.1.1:53
-Flow 258 not-detected: tcp 192.168.1.34:51311 -> 93.79.224.176:14506
-Flow 261 not-detected: tcp 192.168.1.34:51314 -> 93.79.224.176:14506
-Flow 239 not-detected: tcp 192.168.1.34:51291 -> 81.83.77.141:17639
-Flow 242 not-detected: tcp 192.168.1.34:51294 -> 81.83.77.141:17639
-Flow 247 not-detected: tcp 192.168.1.34:51298 -> 82.224.110.241:38895
-Flow 250 not-detected: tcp 192.168.1.34:51301 -> 82.224.110.241:38895
-Flow 121 not-detected: tcp 192.168.1.34:51251 -> 64.4.23.166:40029
-Flow 209 not-detected: tcp 192.168.1.34:51278 -> 64.4.23.159:40009
-Flow 236 not-detected: tcp 192.168.1.34:51290 -> 5.248.186.221:31010
-Flow 241 not-detected: tcp 192.168.1.34:51293 -> 5.248.186.221:31010
-Flow 61 not-detected: tcp 192.168.1.34:51236 -> 111.221.74.45:40008
-Flow 147 not-detected: tcp 192.168.1.34:51256 -> 111.221.77.142:40013
-Flow 109 not-detected: tcp 192.168.1.34:51248 -> 111.221.77.175:40030
-Flow 210 not-detected: tcp 192.168.1.34:51279 -> 111.221.74.48:40008
-Flow 170 not-detected: tcp 192.168.1.34:51267 -> 111.221.74.18:40025
-Flow 253 not-detected: tcp 192.168.1.34:51305 -> 149.13.32.15:13392
-Flow 255 risky: tcp 192.168.1.34:51307 -> 149.13.32.15:13392
-Flow 257 not-detected: tcp 192.168.1.34:51309 -> 149.13.32.15:13392
-Flow 259 risky: tcp 192.168.1.34:51312 -> 149.13.32.15:13392
-Flow 263 not-detected: tcp 192.168.1.34:51316 -> 149.13.32.15:13392
-Flow 167 risky: udp 192.168.1.34:55866 -> 192.168.1.1:53
-Flow 60 not-detected: tcp 192.168.1.34:51235 -> 65.55.223.45:40009
-Flow 59 not-detected: tcp 192.168.1.34:51234 -> 157.55.235.147:40001
-Flow 156 risky: udp 192.168.1.34:64258 -> 192.168.1.1:53
-Flow 67 not-detected: tcp 192.168.1.34:51237 -> 157.55.130.176:40022
-Flow 146 not-detected: tcp 192.168.1.34:51255 -> 157.55.130.142:40005
-Flow 148 not-detected: tcp 192.168.1.34:51257 -> 157.55.235.170:40032
-Flow 207 not-detected: tcp 192.168.1.34:51276 -> 157.55.235.146:40021
-Flow 186 not-detected: tcp 192.168.1.34:51272 -> 157.55.235.152:40029
-Flow 208 not-detected: tcp 192.168.1.34:51277 -> 157.55.235.156:40026
-Flow 149 not-detected: tcp 192.168.1.34:51258 -> 213.199.179.176:40021
-Flow 199 risky: udp 192.168.1.34:64364 -> 192.168.1.1:53
-Flow 178 not-detected: tcp 192.168.1.34:51269 -> 213.199.179.175:40029
-Flow 198 risky: udp 192.168.1.34:60413 -> 192.168.1.1:53
-Flow 10 not-detected: tcp 192.168.1.34:51229 -> 157.56.52.28:40009
-Flow 97 not-detected: tcp 192.168.1.34:51246 -> 157.56.52.44:40020
-Flow 252 not-detected: tcp 192.168.1.34:51303 -> 80.121.84.93:62381
-Flow 254 not-detected: tcp 192.168.1.34:51306 -> 80.121.84.93:62381
-Flow 260 not-detected: tcp 192.168.1.34:51313 -> 212.161.8.36:13392
-Flow 265 not-detected: tcp 192.168.1.34:51318 -> 212.161.8.36:13392
-Flow 267 not-detected: tcp 192.168.1.34:51319 -> 212.161.8.36:13392
-Flow 234 not-detected: tcp 192.168.1.34:51288 -> 76.167.161.6:20274
-Flow 249 not-detected: tcp 192.168.1.34:51300 -> 76.167.161.6:20274
-Flow 227 not-detected: tcp 192.168.1.34:51284 -> 91.190.218.125:12350
-Flow 228 not-detected: tcp 192.168.1.34:51285 -> 91.190.218.125:12350
-Flow 245 not-detected: tcp 192.168.1.34:51296 -> 91.190.216.125:12350
-Flow 246 not-detected: tcp 192.168.1.34:51297 -> 91.190.216.24:12350
-Flow 248 not-detected: tcp 192.168.1.34:51299 -> 91.190.216.125:12350
diff --git a/test/results/flow-captured/default/skype_udp.pcap.out b/test/results/flow-captured/default/skype_udp.pcap.out
deleted file mode 100644
index 39b74b0ae..000000000
--- a/test/results/flow-captured/default/skype_udp.pcap.out
+++ /dev/null
@@ -1 +0,0 @@
-Flow 1 risky: udp 192.168.1.2:35990 -> 24.224.190.149:39262
diff --git a/test/results/flow-captured/default/stun_wa_call.pcapng.out b/test/results/flow-captured/default/stun_wa_call.pcapng.out
index 6060f0b3f..23b2b724d 100644
--- a/test/results/flow-captured/default/stun_wa_call.pcapng.out
+++ b/test/results/flow-captured/default/stun_wa_call.pcapng.out
@@ -1,2 +1,12 @@
+Flow 1 risky: udp 192.168.12.156:46652 -> 93.57.123.227:3478
+Flow 6 risky: udp 192.168.12.156:49526 -> 157.240.203.62:3478
+Flow 2 risky: udp 192.168.12.156:46652 -> 157.240.203.62:3478
+Flow 4 risky: udp 192.168.12.156:46652 -> 157.240.21.51:3478
+Flow 5 risky: udp 192.168.12.156:46652 -> 157.240.195.48:3478
+Flow 3 risky: udp 192.168.12.156:46652 -> 157.240.231.62:3478
+Flow 7 risky: udp 192.168.12.156:49526 -> 157.240.231.62:3478
+Flow 8 risky: udp 192.168.12.156:49526 -> 157.240.196.62:3478
 Flow 11 risky: udp 192.168.12.156:49526 -> 10.82.40.241:40436
 Flow 12 risky: udp 192.168.12.156:49526 -> 93.33.118.87:41107
+Flow 9 risky: udp 192.168.12.156:49526 -> 179.60.192.48:3478
+Flow 10 risky: udp 192.168.12.156:49526 -> 185.60.216.51:3478
diff --git a/test/results/flow-captured/default/telegram_videocall.pcapng.out b/test/results/flow-captured/default/telegram_videocall.pcapng.out
index c2ebd899c..e0cc6941a 100644
--- a/test/results/flow-captured/default/telegram_videocall.pcapng.out
+++ b/test/results/flow-captured/default/telegram_videocall.pcapng.out
@@ -1,8 +1,16 @@
 Flow 26 risky: udp 192.168.12.169:42405 -> 93.36.13.115:35393
 Flow 18 risky: udp 192.168.12.169:40643 -> 91.108.9.35:1400
+Flow 14 risky: udp 192.168.12.169:40906 -> 91.108.17.2:1400
+Flow 13 risky: udp 192.168.12.169:40906 -> 91.108.13.23:1400
+Flow 12 risky: udp 192.168.12.169:40906 -> 91.108.9.35:1400
 Flow 24 risky: udp 192.168.12.169:42405 -> 10.46.103.200:42554
 Flow 19 risky: udp 192.168.12.169:49667 -> 91.108.13.23:1400
 Flow 25 risky: udp 192.168.12.169:40906 -> 10.46.103.200:42554
+Flow 23 risky: udp 192.168.12.169:37444 -> 91.108.17.2:1400
 Flow 20 risky: udp 192.168.12.169:49780 -> 91.108.17.2:1400
+Flow 22 risky: udp 192.168.12.169:37530 -> 91.108.13.23:1400
 Flow 34 midstream: tcp 18.195.162.93:443 -> 192.168.12.169:38956
-Flow 27 risky: udp 192.168.12.169:40906 -> 93.36.13.115:35393
+Flow 21 risky: udp 192.168.12.169:37849 -> 91.108.9.35:1400
+Flow 17 risky: udp 192.168.12.169:42197 -> 91.108.17.2:1400
+Flow 16 risky: udp 192.168.12.169:42197 -> 91.108.13.23:1400
+Flow 15 risky: udp 192.168.12.169:42197 -> 91.108.9.35:1400
diff --git a/test/results/flow-captured/default/tencent_games.pcap.out b/test/results/flow-captured/default/tencent_games.pcap.out
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/test/results/flow-captured/default/tencent_games.pcap.out
diff --git a/test/results/flow-captured/default/wa_video.pcap.out b/test/results/flow-captured/default/wa_video.pcap.out
index d0eab6a06..91366f18d 100644
--- a/test/results/flow-captured/default/wa_video.pcap.out
+++ b/test/results/flow-captured/default/wa_video.pcap.out
@@ -1,2 +1,4 @@
+Flow 3 risky: udp 192.168.2.12:53688 -> 31.13.86.48:3478
 Flow 11 risky: udp 192.168.2.12:53688 -> 91.252.56.51:32641
+Flow 7 risky: udp 192.168.2.12:53688 -> 157.240.196.62:3478
 Flow 10 risky: udp 192.168.2.12:53688 -> 1.60.78.64:59491
diff --git a/test/results/flow-captured/default/wa_voice.pcap.out b/test/results/flow-captured/default/wa_voice.pcap.out
index d6eb995ec..b527a48df 100644
--- a/test/results/flow-captured/default/wa_voice.pcap.out
+++ b/test/results/flow-captured/default/wa_voice.pcap.out
@@ -1,6 +1,11 @@
+Flow 14 risky: udp 192.168.2.12:56328 -> 31.13.86.48:3478
 Flow 23 risky: udp 91.252.56.51:32704 -> 192.168.2.12:56328
 Flow 3 midstream: tcp 192.168.2.12:49354 -> 17.242.60.84:5223
 Flow 25 not-detected: tcp 192.168.2.12:49352 -> 169.254.162.244:49159
 Flow 25 midstream: tcp 192.168.2.12:49352 -> 169.254.162.244:49159
 Flow 9 midstream: tcp 17.171.47.85:443 -> 192.168.2.12:50502
+Flow 18 risky: udp 192.168.2.12:56328 -> 157.240.196.62:3478
+Flow 16 risky: udp 192.168.2.12:56328 -> 157.240.193.48:3478
 Flow 24 risky: udp 192.168.2.12:56328 -> 1.60.78.64:64282
+Flow 17 risky: udp 192.168.2.12:56328 -> 179.60.192.48:3478
+Flow 15 risky: udp 192.168.2.12:56328 -> 185.60.216.51:3478
diff --git a/test/results/flow-captured/default/whatsapp_login_call.pcap.out b/test/results/flow-captured/default/whatsapp_login_call.pcap.out
index e3424d2df..26aabefaa 100644
--- a/test/results/flow-captured/default/whatsapp_login_call.pcap.out
+++ b/test/results/flow-captured/default/whatsapp_login_call.pcap.out
@@ -1,9 +1,25 @@
 Flow 17 risky: tcp 192.168.2.4:49204 -> 17.173.66.102:443
 Flow 39 risky: udp 192.168.2.4:51518 -> 91.253.176.65:9344
+Flow 23 risky: udp 192.168.2.4:51518 -> 31.13.100.14:3478
+Flow 24 risky: udp 192.168.2.4:51518 -> 31.13.70.48:3478
+Flow 25 risky: udp 192.168.2.4:51518 -> 31.13.64.48:3478
+Flow 26 risky: udp 192.168.2.4:51518 -> 31.13.85.48:3478
+Flow 30 risky: udp 192.168.2.4:51518 -> 31.13.73.48:3478
+Flow 27 risky: udp 192.168.2.4:51518 -> 31.13.91.48:3478
+Flow 28 risky: udp 192.168.2.4:51518 -> 31.13.79.192:3478
+Flow 29 risky: udp 192.168.2.4:51518 -> 31.13.93.48:3478
 Flow 55 risky: udp 192.168.2.4:52794 -> 91.253.176.65:9665
 Flow 38 risky: udp 192.168.2.4:51518 -> 1.194.90.191:60312
 Flow 57 risky: tcp 192.168.2.4:49205 -> 17.173.66.102:443
 Flow 6 midstream: tcp 192.168.2.4:49172 -> 23.50.148.228:443
+Flow 50 risky: udp 192.168.2.4:52794 -> 173.252.114.1:3478
+Flow 49 risky: udp 192.168.2.4:52794 -> 179.60.192.48:3478
+Flow 46 risky: udp 192.168.2.4:52794 -> 31.13.73.48:3478
+Flow 47 risky: udp 192.168.2.4:52794 -> 31.13.93.48:3478
+Flow 51 risky: udp 192.168.2.4:52794 -> 31.13.90.48:3478
+Flow 52 risky: udp 192.168.2.4:52794 -> 31.13.74.48:3478
+Flow 53 risky: udp 192.168.2.4:52794 -> 31.13.84.48:3478
+Flow 48 risky: udp 192.168.2.4:52794 -> 31.13.79.192:3478
 Flow 54 risky: udp 192.168.2.4:52794 -> 1.194.90.191:51727
 Flow 1 risky: tcp 192.168.2.4:49199 -> 17.172.100.70:993
 Flow 1 midstream: tcp 192.168.2.4:49199 -> 17.172.100.70:993