summaryrefslogtreecommitdiff
path: root/test/results/flow-info/default/emotet.pcap.out
diff options
context:
space:
mode:
authorToni Uhlig <matzeton@googlemail.com>2023-11-08 01:27:42 +0100
committerToni Uhlig <matzeton@googlemail.com>2023-11-08 01:27:42 +0100
commitd80ea84d2ebebe29761f3727fbc5295ba3cb81b8 (patch)
tree036fa1f3a19cdd9e03b9119cecd0e0386cb9bf86 /test/results/flow-info/default/emotet.pcap.out
parentb1e679b0bbc4e2c33db12dde598c35c8bf680490 (diff)
Reset `Unidirectional Traffc` risk if packets from both directions processed.1.6rc2
* Fixed risk hash value calculation, which was only done lower 32 bits. * Reduced default reader threads count to two if cross compiling. Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'test/results/flow-info/default/emotet.pcap.out')
-rw-r--r--test/results/flow-info/default/emotet.pcap.out2
1 files changed, 1 insertions, 1 deletions
diff --git a/test/results/flow-info/default/emotet.pcap.out b/test/results/flow-info/default/emotet.pcap.out
index 956e185a0..286ba1ff8 100644
--- a/test/results/flow-info/default/emotet.pcap.out
+++ b/test/results/flow-info/default/emotet.pcap.out
@@ -69,7 +69,7 @@
RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn
detection-update: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443] [TLS][Unknown][Web][Safe][]
RISK: Self-signed Cert, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn
- analyse: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443]
+ analyse: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443] [TLS][Unknown][Web][Safe]
min| max| avg| stddev| variance| entropy
[IAT.........: 0.000| 1.263| 0.113| 0.288| 82863.079| 2.700]
[PKTLEN......: 46.000| 1428.000| 682.000| 663.200| 439900.200| 4.200]