diff options
| author | Toni Uhlig <matzeton@googlemail.com> | 2024-09-11 13:01:23 +0200 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2024-09-11 13:01:23 +0200 |
| commit | 1c9aa854851c4daf479c988ce8a064ae2accbaab (patch) | |
| tree | ec61c08ebeb5ee3e7df512c962f9f3ccc96d25b0 /test/results/flow-info/subclassification_disable | |
| parent | aef9d629f01b66a5e1985f265e9c74fd40542fe1 (diff) | |
Save hostname after detection finished for later use within analyse/end/idle flow events. Fixes #39.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'test/results/flow-info/subclassification_disable')
4 files changed, 5 insertions, 5 deletions
diff --git a/test/results/flow-info/subclassification_disable/anydesk.pcapng.out b/test/results/flow-info/subclassification_disable/anydesk.pcapng.out index f83683ddf..c71da70b9 100644 --- a/test/results/flow-info/subclassification_disable/anydesk.pcapng.out +++ b/test/results/flow-info/subclassification_disable/anydesk.pcapng.out @@ -76,8 +76,8 @@ RISK: Known Proto on Non Std Port, Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing idle: [.....5] [ip4][..tcp] [..192.168.1.187][54164] -> [..192.168.1.178][.7070] [TLS.AnyDesk][Unknown][RemoteAccess][Acceptable] RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing - idle: [.....4] [ip4][..udp] [..192.168.1.187][55376] -> [....192.168.1.1][...53] [DNS.AnyDesk][Unknown][Network][Acceptable] - idle: [.....3] [ip4][..udp] [..192.168.1.187][59511] -> [....192.168.1.1][...53] [DNS.AnyDesk][Unknown][Network][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.1.187][55376] -> [....192.168.1.1][...53] [DNS.AnyDesk][Unknown][Network][Acceptable][relay-9b6827f2.net.anydesk.com] + idle: [.....3] [ip4][..udp] [..192.168.1.187][59511] -> [....192.168.1.1][...53] [DNS.AnyDesk][Unknown][Network][Acceptable][relay-3185a847.net.anydesk.com] idle: [.....7] [ip4][..tcp] [..192.168.1.128][48260] -> [195.181.174.176][..443] [TLS.AnyDesk][Unknown][RemoteAccess][Acceptable] RISK: Missing SNI TLS Extn, Desktop/File Sharing, Uncommon TLS ALPN DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/subclassification_disable/dns.pcap.out b/test/results/flow-info/subclassification_disable/dns.pcap.out index 9f35988ab..3085f6e88 100644 --- a/test/results/flow-info/subclassification_disable/dns.pcap.out +++ b/test/results/flow-info/subclassification_disable/dns.pcap.out @@ -7,5 +7,5 @@ DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] ERROR-EVENT: Unknown packet type [1/16] ERROR-EVENT: Unknown packet type [2/16] - idle: [.....1] [ip4][..udp] [.192.168.170.20][...53] -> [..192.168.170.8][32795] [DNS.Google][Unknown][Network][Acceptable] + idle: [.....1] [ip4][..udp] [.192.168.170.20][...53] -> [..192.168.170.8][32795] [DNS.Google][Unknown][Network][Acceptable][www.l.google.com] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/subclassification_disable/http.pcapng.out b/test/results/flow-info/subclassification_disable/http.pcapng.out index b36af79c7..662dc2e07 100644 --- a/test/results/flow-info/subclassification_disable/http.pcapng.out +++ b/test/results/flow-info/subclassification_disable/http.pcapng.out @@ -3,5 +3,5 @@ DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] new: [.....1] [ip4][..tcp] [..192.168.1.128][42170] -> [.216.58.208.142][...80] detected: [.....1] [ip4][..tcp] [..192.168.1.128][42170] -> [.216.58.208.142][...80] [HTTP.Google][Google][Web][Acceptable][google.com] - end: [.....1] [ip4][..tcp] [..192.168.1.128][42170] -> [.216.58.208.142][...80] [HTTP.Google][Google][Web][Acceptable] + end: [.....1] [ip4][..tcp] [..192.168.1.128][42170] -> [.216.58.208.142][...80] [HTTP.Google][Google][Web][Acceptable][google.com] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/subclassification_disable/quic-mvfst-27.pcapng.out b/test/results/flow-info/subclassification_disable/quic-mvfst-27.pcapng.out index ffd1d5b83..931bd10c9 100644 --- a/test/results/flow-info/subclassification_disable/quic-mvfst-27.pcapng.out +++ b/test/results/flow-info/subclassification_disable/quic-mvfst-27.pcapng.out @@ -1,5 +1,5 @@ DAEMON-EVENT: init new: [.....1] [ip4][..udp] [......10.0.2.15][35957] -> [..69.171.250.15][..443] detected: [.....1] [ip4][..udp] [......10.0.2.15][35957] -> [..69.171.250.15][..443] [QUIC.Facebook][Facebook][SocialNetwork][Fun][graph.facebook.com] - idle: [.....1] [ip4][..udp] [......10.0.2.15][35957] -> [..69.171.250.15][..443] [QUIC.Facebook][Facebook][SocialNetwork][Fun] + idle: [.....1] [ip4][..udp] [......10.0.2.15][35957] -> [..69.171.250.15][..443] [QUIC.Facebook][Facebook][SocialNetwork][Fun][graph.facebook.com] DAEMON-EVENT: shutdown |