diff options
| author | Toni Uhlig <matzeton@googlemail.com> | 2023-11-08 01:27:42 +0100 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2023-11-08 01:27:42 +0100 |
| commit | d80ea84d2ebebe29761f3727fbc5295ba3cb81b8 (patch) | |
| tree | 036fa1f3a19cdd9e03b9119cecd0e0386cb9bf86 /test/results/flow-info/default/vk.pcapng.out | |
| parent | b1e679b0bbc4e2c33db12dde598c35c8bf680490 (diff) | |
Reset `Unidirectional Traffc` risk if packets from both directions processed.1.6rc2
* Fixed risk hash value calculation, which was only done lower 32 bits.
* Reduced default reader threads count to two if cross compiling.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'test/results/flow-info/default/vk.pcapng.out')
| -rw-r--r-- | test/results/flow-info/default/vk.pcapng.out | 28 |
1 files changed, 18 insertions, 10 deletions
diff --git a/test/results/flow-info/default/vk.pcapng.out b/test/results/flow-info/default/vk.pcapng.out index 51a8ee6ea..d4065b1cf 100644 --- a/test/results/flow-info/default/vk.pcapng.out +++ b/test/results/flow-info/default/vk.pcapng.out @@ -10,7 +10,7 @@ new: [.....3] [ip4][..tcp] [..192.168.1.249][60436] -> [..87.240.132.78][..443] [MIDSTREAM] detected: [.....3] [ip4][..tcp] [..192.168.1.249][60436] -> [..87.240.132.78][..443] [TLS][VK][Web][Safe] RISK: Unidirectional Traffic - analyse: [.....3] [ip4][..tcp] [..192.168.1.249][60436] -> [..87.240.132.78][..443] + analyse: [.....3] [ip4][..tcp] [..192.168.1.249][60436] -> [..87.240.132.78][..443] [TLS][VK][Web][Safe] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 1.010| 0.043| 0.181| 32751.438| 1.300] [PKTLEN......: 52.000| 758.000| 125.300| 191.100| 36507.600| 4.000] @@ -31,7 +31,7 @@ new: [.....6] [ip4][..tcp] [..192.168.1.249][56504] -> [.87.240.129.135][..443] [MIDSTREAM] detected: [.....6] [ip4][..tcp] [..192.168.1.249][56504] -> [.87.240.129.135][..443] [TLS][VK][Web][Safe] RISK: Unidirectional Traffic - analyse: [.....2] [ip4][..tcp] [..192.168.1.249][40344] -> [.87.240.129.140][..443] + analyse: [.....2] [ip4][..tcp] [..192.168.1.249][40344] -> [.87.240.129.140][..443] [TLS][VK][Web][Safe] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 2.007| 0.151| 0.451| 203470.717| 2.100] [PKTLEN......: 52.000| 1017.000| 241.000| 249.500| 62251.300| 4.300] @@ -57,14 +57,22 @@ RISK: Unidirectional Traffic idle: [.....2] [ip4][..tcp] [..192.168.1.249][40344] -> [.87.240.129.140][..443] [TLS][VK][Web][Safe] RISK: Unidirectional Traffic - idle: [.....4] [ip4][..tcp] [..192.168.1.249][59154] -> [.87.240.185.137][..443] - idle: [.....5] [ip4][..tcp] [..192.168.1.249][32990] -> [..87.240.169.10][..443] - idle: [.....8] [ip4][..tcp] [..192.168.1.249][59722] -> [..87.240.169.11][..443] - idle: [....10] [ip4][..tcp] [..192.168.1.249][43644] -> [..87.240.132.67][..443] - idle: [.....7] [ip4][..tcp] [..192.168.1.249][47934] -> [...87.240.169.3][..443] - idle: [.....9] [ip4][..tcp] [..192.168.1.249][43938] -> [.87.240.129.135][..443] + idle: [.....4] [ip4][..tcp] [..192.168.1.249][59154] -> [.87.240.185.137][..443] [TLS.VK][VK][SocialNetwork][Fun] + RISK: Unidirectional Traffic + idle: [.....5] [ip4][..tcp] [..192.168.1.249][32990] -> [..87.240.169.10][..443] [TLS.VK][VK][SocialNetwork][Fun] + RISK: Unidirectional Traffic + idle: [.....8] [ip4][..tcp] [..192.168.1.249][59722] -> [..87.240.169.11][..443] [TLS.VK][VK][SocialNetwork][Fun] + RISK: Unidirectional Traffic + idle: [....10] [ip4][..tcp] [..192.168.1.249][43644] -> [..87.240.132.67][..443] [TLS][VK][Web][Safe] + RISK: Unidirectional Traffic + idle: [.....7] [ip4][..tcp] [..192.168.1.249][47934] -> [...87.240.169.3][..443] [TLS.VK][VK][SocialNetwork][Fun] + RISK: Unidirectional Traffic + idle: [.....9] [ip4][..tcp] [..192.168.1.249][43938] -> [.87.240.129.135][..443] [TLS][VK][Web][Safe] + RISK: Unidirectional Traffic idle: [.....3] [ip4][..tcp] [..192.168.1.249][60436] -> [..87.240.132.78][..443] [TLS][VK][Web][Safe] RISK: Unidirectional Traffic - idle: [.....1] [ip4][..tcp] [..192.168.1.249][33904] -> [.87.240.129.131][..443] - idle: [.....6] [ip4][..tcp] [..192.168.1.249][56504] -> [.87.240.129.135][..443] + idle: [.....1] [ip4][..tcp] [..192.168.1.249][33904] -> [.87.240.129.131][..443] [TLS][VK][Web][Safe] + RISK: Unidirectional Traffic + idle: [.....6] [ip4][..tcp] [..192.168.1.249][56504] -> [.87.240.129.135][..443] [TLS][VK][Web][Safe] + RISK: Unidirectional Traffic DAEMON-EVENT: shutdown |