diff options
author | Toni Uhlig <matzeton@googlemail.com> | 2021-09-14 18:19:47 +0200 |
---|---|---|
committer | Toni Uhlig <matzeton@googlemail.com> | 2021-09-14 18:19:47 +0200 |
commit | ea0b04d6482a686e967f8372af606115a3b191a9 (patch) | |
tree | 74f3654f0790074a06536ec833d52601832a32fd /test/results/safari.pcap.out | |
parent | 6faded3cc7084cb898773dafc1ca9422242f9c81 (diff) |
bump libnDPI to 0eb7a0388c4549ebbf8cd7a10d398088005cc2de
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'test/results/safari.pcap.out')
-rw-r--r-- | test/results/safari.pcap.out | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/test/results/safari.pcap.out b/test/results/safari.pcap.out index 2d3cd450a..d6c4ed06f 100644 --- a/test/results/safari.pcap.out +++ b/test/results/safari.pcap.out @@ -108,6 +108,7 @@ 02374{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620898025,"pkt_ts_usec":371857,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} 01009{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620898025,"pkt_ts_usec":483096,"pkt_caplen":497,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":497,"pkt_l4_len":463,"pkt":"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"} 00424{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620898025,"pkt_ts_usec":512858,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA072JAADQGyMSSMDoSwKgBsgG71+RZmQb9jRULAIAQAfYrmwAAAQEICjpWsAAzMMq8"} +01107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":923,"source":"safari.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":255,"flow_first_seen":1620898024056,"flow_last_seen":1620898025641,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":205796,"flow_avg_l4_payload_len":807,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":55262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.iit.cnr.it","server_names":"www.iit.cnr.it","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"263c859c5391203d774bc0599793d915","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=NL, ST=Noord-Holland, L=Amsterdam, O=TERENA, CN=TERENA SSL CA 3","issuerDN":"C=IT, ST=Lazio, L=Roma, O=Consiglio Nazionale delle Ricerche, OU=IIT, CN=www.iit.cnr.it","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"C4:F6:98:75:7E:20:5C:B6:33:14:59:3F:CF:26:96:38:D0:4B:73:69"}} 00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5392,"source":"safari.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1620898027036,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":55285,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00441{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5392,"source":"safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620898027,"pkt_ts_usec":36438,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGrBvAqAGykjA6Etf1AbvGGXtuAAAAALAC\/\/+JoQAAAgQFtAEDAwUBAQgKMzDQVQAAAAAEAgAA"} 00437{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5393,"source":"safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620898027,"pkt_ts_usec":65042,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGuB+SMDoSwKgBsgG71\/XZbafoxhl7b6AS\/ogqVAAAAgQFrAQCCAo6VrYRMzDQVQEDAwc="} @@ -127,7 +128,7 @@ 00497{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5404,"source":"safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620898027,"pkt_ts_usec":137146,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnApBAADQGtWSSMDoSwKgBsgG71\/XZbbVoxhl8t4AYAfxuXAAAAQEICjpWtlkzMNCbFAMDAAEBFgMDAChG7Yuecuxj9\/f8DAAn+WUYe1pqJuV11zsYwYq7up8geYP54YCdtVMI"} 00426{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5405,"source":"safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620898027,"pkt_ts_usec":137225,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6Etf1AbvGGXy32W21m4AQD\/44BAAAAQEICjMw0LI6VrZZ"} 00939{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5406,"source":"safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620898027,"pkt_ts_usec":138264,"pkt_caplen":444,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":444,"pkt_l4_len":410,"pkt":"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"} -00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6019,"source":"safari.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2083,"flow_first_seen":1620898024056,"flow_last_seen":1620898029980,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":1877633,"flow_avg_l4_payload_len":901,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":55262,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6019,"source":"safari.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":255,"flow_first_seen":1620898024056,"flow_last_seen":1620898029980,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":205796,"flow_avg_l4_payload_len":807,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":55262,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6019,"source":"safari.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":801,"flow_first_seen":1620898025216,"flow_last_seen":1620898026198,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":648336,"flow_avg_l4_payload_len":809,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":55265,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6019,"source":"safari.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":621,"flow_first_seen":1620898025216,"flow_last_seen":1620898026065,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":509563,"flow_avg_l4_payload_len":820,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":55266,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6019,"source":"safari.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":927,"flow_first_seen":1620898025216,"flow_last_seen":1620898026187,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":807134,"flow_avg_l4_payload_len":870,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":55267,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} @@ -142,7 +143,7 @@ ~~ total detected protocols..: 7 ~~ total active/idle flows...: 7/7 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ total memory allocated....: 2171149 bytes -~~ total memory freed........: 2171149 bytes -~~ total allocations/frees...: 41384/41384 +~~ total memory allocated....: 2171495 bytes +~~ total memory freed........: 2171495 bytes +~~ total allocations/frees...: 41385/41385 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |